Crypto Custody Safety: What the Coldcard Hack Means for Collateral

In late July 2026, thousands of Bitcoin holders discovered that a hardware wallet they trusted had been quietly generating predictable seed phrases for five years. The Coldcard exploit drained roughly 1,816 BTC, about $116 million, from more than 5,200 addresses across four coordinated waves. It is the largest hardware wallet exploit of 2026.

If you hold Bitcoin, this is worth understanding carefully. And if you are considering pledging crypto as collateral for a mortgage, it raises a fair question about crypto custody safety: where should your coins actually live?

This post is not an argument against self-custody. Self-custody remains a legitimate and important choice, and Milo offers a self-custody mortgage precisely because many holders want to keep their keys. But the Coldcard incident illustrates a specific category of risk, and it is worth knowing how institutional custody addresses it.

What Actually Happened With Coldcard

The root cause was a firmware change made in March 2021. A guard in the code checked whether a random number generator macro existed rather than whether it was actually enabled. That single logic error rerouted seed generation away from the STM32 hardware RNG and onto a deterministic software fallback.

The practical effect was severe. Seed entropy collapsed to roughly 40 bits on Mk2 and Mk3 devices and roughly 72 bits on Mk4, Q, and Mk5. An attacker who could constrain the device UID, timer state, and prior RNG call history could reproduce candidate output streams offline, derive the resulting addresses, and check them against public blockchain data. No physical access to the device was required.

The confirmed exploit affected Coldcard Mk2 and Mk3 devices that generated a wallet seed using firmware versions v4.0.0 through v5.0.3. The flaw sat undetected for over five years.

The Lesson Is Not "Self-Custody Is Bad"

It would be easy to read this story as an indictment of self-custody. That reading is too simple, and it is not the conclusion we would draw.

Self-custody eliminates counterparty risk, which is a real and meaningful category of risk. Anyone who lived through the Celsius, BlockFi, and FTX failures understands why holders want their keys. Coldcard is also a well-regarded product built by serious people, and the flaw was a subtle build configuration error rather than negligence or bad faith.

The actual lesson is narrower and more useful: single-device custody concentrates risk in one firmware implementation. If that implementation has a flaw, whether in entropy generation, signing, or backup, there is no second layer to catch it. You are trusting one codebase, one supply chain, and one update process.

That is a reasonable trade for many holders. It is a different trade than the one an institutional custodian makes.

How Qualified Custodians Address This Risk

When you pledge crypto as collateral for a Milo mortgage, the assets are held with qualified institutional custodians, specifically BitGo and Coinbase Custody. These are SOC 2 Type II audited firms operating under regulatory oversight.

The structural differences matter here:

Multi-signature architecture. Institutional custody does not depend on a single key generated by a single device. Multiple independent keys, generated through separate systems and stored in separate locations, must cooperate to move funds. A flaw in any one key generation process does not compromise the account.

Cold storage by default. Pledged collateral sits in cold storage, offline and disconnected from any network. It is not sitting in a hot wallet available for operational use.

Independent audit. SOC 2 Type II is not a marketing badge. It requires an external auditor to test controls over an extended observation period. Entropy generation, key ceremony procedures, and access controls are examined by people whose job is finding exactly the kind of flaw that sat in Coldcard's firmware for five years.

No rehypothecation. This one is important. Milo does not lend out, stake, or otherwise reuse pledged collateral. Your Bitcoin sits in custody as collateral and nothing else happens to it. The 2022 crypto lending collapses happened largely because platforms were recycling customer assets. That practice is not part of how Milo operates.

Custody Options Compared

Neither column is universally correct. They distribute risk differently. Self-custody removes counterparty risk and accepts implementation and user-error risk. Institutional custody accepts counterparty risk and removes single-implementation and backup-discipline risk.

What This Means If You Are Pledging Collateral

For a crypto-backed mortgage, the collateral needs to be verifiably held, valued, and available for the duration of the loan. That is a different requirement than storing your own long-term savings.

Milo's crypto-backed mortgage uses qualified custodians for exactly this reason. The product is also structured to accommodate drawdowns of up to 65% in collateral value, which means normal Bitcoin volatility does not put your position at immediate risk. Margin calls exist and are disclosed upfront, but the buffer is wide by design.

If you would rather not transfer custody at all, the self-custody mortgage uses your holdings as a qualifying asset while you retain your keys, at up to 75% LTV with no margin calls. Milo built this product because keeping your own keys is a legitimate preference, not a problem to be talked out of.

If You Own a Coldcard

A few practical steps, independent of anything to do with mortgages:

1. Check your firmware version and device model. The confirmed exposure covers Mk2 and Mk3 devices with seeds generated on firmware v4.0.0 through v5.0.3.
2. If you may be affected, generate a new seed on updated firmware and move funds to the new addresses. Do not simply update the firmware; the compromised seed remains compromised.
3. Verify entropy independently where possible. Several community tools have been published to help holders check whether their addresses fall in the affected range.
4. Consider distributing large holdings across multiple custody methods. Concentration in any single approach, hardware or institutional, is the underlying risk.

Frequently Asked Questions

Does the Coldcard exploit affect crypto pledged with Milo? No. Collateral pledged for a Milo mortgage is held with BitGo and Coinbase Custody using multi-signature institutional infrastructure, not consumer hardware wallets. The Coldcard firmware flaw has no bearing on assets in qualified custody.

Does Milo lend out or stake my pledged Bitcoin? No. Milo does not rehypothecate pledged collateral. Your crypto is held in cold storage as collateral for the duration of the loan and is not lent, staked, or reused.

Can I get a crypto mortgage without giving up custody of my coins? Yes. The self-custody mortgage lets you use your crypto as a qualifying asset while retaining your own keys, at up to 75% LTV. There are no margin calls on that product.

What happens to my collateral if Bitcoin drops sharply? Milo's crypto-backed mortgage is structured to accommodate drawdowns of up to 65%. If collateral value falls below the required ratio, Milo issues a margin call with notice and time to respond by adding collateral or paying down the loan. Collateral is not liquidated without that process.

Is institutional custody safer than self-custody? Neither is universally safer. They carry different risks. Institutional custody reduces single-implementation and backup-discipline risk while introducing counterparty risk, which is mitigated through regulation, SOC 2 Type II audit, and multi-signature architecture. Self-custody eliminates counterparty risk while concentrating implementation and user-error risk.

The Bottom Line

The Coldcard incident is a reminder that every custody model carries assumptions, and those assumptions occasionally fail. A build flag set incorrectly in 2021 cost holders $116 million in 2026.

The right response is not to abandon self-custody or to blindly trust institutions. It is to understand what each model actually protects against, and to match the model to the purpose. For long-term personal savings, many holders will reasonably keep their own keys. For collateral backing a mortgage, where the assets must be verifiably held and audited over years, a qualified custodian with multi-signature architecture and external audit removes a category of risk that a single device cannot.

Milo supports both. If you want to understand how your crypto could work toward a home purchase under either structure, start at milo.io.

The opinions expressed in the Blog are for general informational purposes only and are not intended to provide specific advice or recommendations for any individual or on any specific security or investment product.