Bitcoin ETF Inflows Hit Four-Month High After Coldcard Wallet Security Incident
US-listed Bitcoin exchange-traded funds recorded their strongest weekly inflows since April 2026, attracting more than $850 million as a high-profile hardware wallet security incident renewed attention on digital asset custody risks. According to data reported by Bloomberg on August 10, 2026, the ETFs, which provide price exposure to Bitcoin without requiring investors to hold or secure the tokens directly, drew significant capital in the wake of the Coldcard wallet exploit.
Bitcoin traded near the $64,000 level in early August 2026. On August 10, prices moved in a range that included highs above $65,000 before closing lower in some market data sets, reflecting a broader period of consolidation after a substantial decline from previous peaks. Market data from multiple trackers placed recent daily closes in the $63,900 to $65,000 area, with the asset having experienced notable volatility earlier in the summer.
The inflows marked a clear shift after a weaker stretch for crypto markets. Reports indicated that the weekly figure represented the strongest performance for the group of funds since April, with some trackers citing totals approaching or exceeding $850 million to $1 billion depending on the exact measurement window. BlackRock’s iShares Bitcoin Trust accounted for a substantial portion of the activity, alongside contributions from other major issuers.
Key Takeaways:
- Bitcoin ETFs attracted over $850 million in inflows, marking the highest weekly inflows since April 2026.
- A Coldcard wallet security incident prompted renewed focus on digital asset custody risks.
- The incident involved a firmware vulnerability, leading to significant Bitcoin losses from affected wallets.
- BlackRock’s iShares Bitcoin Trust was a major contributor to the ETF inflows, highlighting investor preference for institutional custody.
- The security event spurred discussions on the trade-offs between self-custody and third-party custody in the crypto community.
Coldcard Firmware Vulnerability and Market Response
The catalyst for renewed focus on custody came from a vulnerability in Coinkite’s Coldcard hardware wallets. Attackers exploited a firmware issue originating in a March 2021 release that weakened the randomness used in seed generation on certain devices. Effective entropy fell well below the intended 128-bit standard on affected models, allowing reconstruction of private keys without physical access to the devices.
On-chain analysis indicated that drainage of funds began around July 30, 2026. Estimates of total losses ranged from approximately $116 million to more than $130 million in Bitcoin across thousands of addresses and multiple waves of activity. Researchers tracked the movement of roughly 1,800 BTC or more from affected wallets. The incident ranked among the larger security events of the year involving self-custody tools.
Bloomberg Crypto summarizing the Coinkite Coldcard hardware wallet security incident. Figures shown ($110 million in Bitcoin stolen, roughly 5,000 wallets compromised, and 1,755 Bitcoin drained) reflect Galaxy Research estimates reported in early August 2026. Later tallies from the same and other trackers rose above $116–130 million as additional waves were identified.
Coinkite issued disclosures and firmware updates. Company statements and independent reporting emphasized that updating firmware does not restore seeds generated under the vulnerable versions. Affected users were advised to generate new seeds on patched devices and transfer remaining assets. The episode prompted widespread discussion within the Bitcoin community about the practical limits of offline storage.
TRM Labs data illustrating the annual number of crypto hacks from 2022 through the first half of 2026. TRM Labs reported a record 207 separate hacks in H1 2026, the highest six-month total in its dataset, even as total losses for the period fell to $972 million.
Community Gatherings and Broader Security Discussions
The security event coincided with a challenging period for crypto sentiment. On August 6, 2026, participants gathered at PubKey, a Bitcoin-themed bar in Manhattan’s West Village, to discuss the Coldcard incident. Attendees, including developers and industry figures, examined the technical details of the exploit and its implications for self-custody practices. Bloomberg reporting described the gathering as a space where participants reflected on security, industry perceptions, and the foundational principles of Bitcoin amid the losses.
The timing of the ETF inflows drew commentary from market observers. Some analysts noted that the regulated structure of the funds, which rely on institutional custodians rather than individual key management, may have appealed to investors seeking exposure without direct custody responsibilities. Guests on Bloomberg’s ETF IQ program on August 10 discussed the relative positioning of ETFs in the context of the recent security concerns, alongside other market themes.
Bitcoin has traded in a relatively contained range for much of the summer of 2026 after a steeper decline from highs reached in late 2025. The asset’s year-to-date and longer-term performance reflected the broader adjustment in digital asset valuations. Spot Bitcoin ETFs, approved in the United States in 2024, have continued to serve as a primary vehicle for institutional and retail access, with cumulative net inflows reaching tens of billions of dollars since launch according to industry trackers.
Bloomberg chart tracking Bitcoin’s price from late 2025 through mid-2026. Showing cryptocurrency declining from highs near $120,000 in October 2025 to levels around $55,000–$65,000 by July–August 2026, market data reporting a roughly 45–50% drawdown from the prior peak during this period.
Institutional Flows and Custody Considerations
The weekly inflow figures followed a period that included at least one session of notable outflows before the subsequent rebound. Consecutive days of positive flows into the major products helped produce the four-month high. Data compilations showed BlackRock’s product leading, with additional participation from funds managed by Fidelity and other providers.
Market participants have long debated the trade-offs between self-custody and third-party custody. The Coldcard incident illustrated residual technical risks even in devices designed for offline storage. At the same time, the ETF structure transfers operational security responsibilities to regulated custodians and fund managers. Industry commentary after the event highlighted both the appeal of the ETF model for certain investors and the ongoing importance of robust security practices for those who prefer direct ownership of Bitcoin.
Price action in early August remained relatively muted compared with the scale of the security discussion. Bitcoin held within a multi-week band near the mid-$60,000s, with daily volumes reflecting steady but not exceptional activity. On-chain metrics reported in the period following the exploit showed elevated wallet creation and movement of coins as holders responded to the vulnerability disclosures.
Context Within the Wider Crypto Landscape
The events of early August 2026 occurred against a backdrop of continued development in digital asset markets. Regulatory discussions in the United States, including progress on broader crypto legislation, remained a background factor. Tokenization initiatives and other institutional applications of blockchain technology continued to attract attention, though the immediate focus stayed on Bitcoin custody and fund flows.
Fortune Prime Global, an ASIC-regulated broker, provides clients with access to a range of financial markets, including foreign exchange and related instruments, through platforms designed for transparency and client protection. For those seeking foundational knowledge of currency markets, Forex Trading Basics offers structured educational material on core concepts such as market structure, order types, and risk considerations.
Bitcoin’s role as the largest cryptocurrency by market capitalization continues to anchor broader digital asset sentiment. The combination of security events and institutional product flows in August 2026 underscored the dual tracks of technological risk and regulated investment access that characterize the current market environment.
The weekly ETF inflows of more than $850 million, the largest since April, arrived as the industry assessed the fallout from the Coldcard firmware vulnerability. Bitcoin prices in the period hovered near $64,000, reflecting a market that absorbed the security news while channeling capital into exchange-traded products. Official reporting and on-chain analysis continue to document both the scale of the losses from the exploit and the subsequent movement of investment capital into the regulated fund structure.
People Also Ask:
What caused the surge in Bitcoin ETF inflows?
The surge in Bitcoin ETF inflows was primarily driven by a security incident involving Coldcard wallets, which highlighted the risks associated with digital asset custody and led investors to prefer ETFs for exposure without direct custody responsibilities.
How did the Coldcard wallet incident affect Bitcoin investors?
The Coldcard wallet incident exposed a firmware vulnerability that allowed attackers to reconstruct private keys, resulting in significant Bitcoin losses for affected users and prompting discussions on self-custody versus third-party custody.
Why are ETFs appealing to Bitcoin investors after security incidents?
ETFs are appealing because they offer exposure to Bitcoin without requiring investors to manage their own private keys, transferring security responsibilities to regulated custodians and fund managers, which can be seen as more secure following incidents like the Coldcard exploit.