A Canadian crypto company under siege
A Toronto-based company is at the heart of one of the biggest cryptocurrency security stories of the year. Coinkite, the firm behind the bitcoin-only hardware wallet Coldcard, is dealing with an ongoing hack that has reportedly siphoned off more than $100 million US worth of bitcoin from users of the device.
Coldcard has built a loyal following among bitcoin holders specifically because it's marketed as an offline, "air-gapped" way to store crypto securely — the kind of device serious investors buy precisely to avoid the type of exchange hacks that have plagued the industry for years. That's part of what makes this breach so significant: it strikes at a product built on a promise of being hack-resistant.
What we know so far
Details are still emerging, but the losses attributed to the breach have already climbed past the $100 million US mark, according to reporting on the incident. The company is based in Toronto, putting a Canadian firm squarely at the centre of a story with global financial implications, given how widely Coldcard devices are used by bitcoin holders around the world.
As with many crypto security incidents, the full picture — how the breach happened, how many users were affected, and what recovery options exist — is still coming into focus. Investigations into breaches like this typically take time, and companies in Coinkite's position often face pressure to be transparent quickly while also making sure they don't compromise an active investigation.
Why this matters beyond the crypto world
Even if you've never touched bitcoin, this story is worth paying attention to. Canada has increasingly positioned itself as a hub for fintech and crypto-adjacent companies, and incidents like this test public confidence in that sector. A breach of this scale at a company built on a security-first reputation raises fresh questions about how safe any hardware wallet really is, and what kind of oversight exists for crypto companies operating out of Canadian cities.
It's also a reminder that Canada's tech sector isn't just Toronto's Bay Street fintech giants or Waterloo's software firms — it includes smaller, specialized hardware and security companies that can suddenly find themselves at the centre of an international story when something goes wrong.
What to watch next
Expect more details to surface about how the hack occurred, whether it involved a supply chain compromise, a software vulnerability, or something else entirely. Bitcoin holders using Coldcard devices will want to watch official channels from Coinkite for guidance on next steps, including whether any funds can be recovered or whether affected users need to take immediate action to protect remaining holdings.
For now, the story serves as a stark example of how even security-focused Canadian tech companies aren't immune to sophisticated attacks — and how quickly those losses can add up in the world of cryptocurrency.
Source: CBC News
