Crypto news, hardwired.

Blog

  • Wall Street’s Tokens Come With a Pause Button

    Wall Street’s Tokens Come With a Pause Button

    Wall Street is finally putting stocks on a blockchain. Before anyone throws a party, read the part of the brochure about the off switch.

    The facts first

    DTCC, the giant clearinghouse in the middle of nearly every U.S. stock trade, says its Tokenization Service opens this month. Its Oct. 23 launch sheet lists 34 securities at launch, select big stocks, ETFs and Treasuries, on two networks: the Canton Network and Besu, which is DTCC’s own private chain. Stellar and Circle’s Arc are penciled in for 2027.

    The tokens can move 24/7, but only between wallets DTC has registered. DTC keeps the official books. And DTCC’s own product page says the tokens come with mint, burn, pause and clawback controls.

    Those are the facts. Here’s my read.

    A fence, not a bridge

    Crypto was sold to regular people as a way to hold something nobody could freeze. This is the opposite. It’s the same stock, the same middleman and the same record keeper, now with a button that can stop it or pull it back.

    To be fair, that is exactly what a regulated market is supposed to have. Courts issue orders, mistakes happen, and a clearinghouse that couldn’t reverse a bad transfer would be a problem. I’m not saying DTCC is up to something. I’m saying “on-chain” does not mean “out of their hands.” The pause button has an owner, and it isn’t you.

    Speculation, labeled: my guess is this is less about opening Wall Street to crypto and more about Wall Street making sure tokenized stocks run on rails it already controls, before someone else’s rails get there first. Note who’s on at launch: one network DTCC runs itself, and one built for banks that want privacy. The public chains retail investors actually use aren’t on Day 1. I could be wrong, and the 2027 list may grow. But first movers tend to set the rules.

    The hype problem

    Meanwhile, parts of the timeline are telling XRP, XLM and HBAR holders their coins are “already inside” and that $30 trillion is “incoming.” The launch sheet doesn’t say that. The XRP Ledger and Hedera aren’t named. Stellar is, for 2027. The $30 trillion is the pool of assets that could be tokenized someday, not money pouring into any coin.

    And even when a chain does make the list, the tokens are stocks and bonds sitting in registered wallets. A tokenized share of a big company on Stellar is still a share of that company. It isn’t a buy order for XLM.

    None of this means tokenization is fake. Faster settlement and 24/7 transfers are real improvements, mostly for big firms. Just know who’s holding the keys before someone tells you it’s your moon ticket.

    Sources: DTCC (Tokenization Service tear sheet and roadmap, Oct. 23, 2026; Tokenization Service product page); DTCC Learning Center; CantonNews; posts on X.

    This is opinion, not investment advice.

  • DTCC’s Tokenization Service Is Due This Month. Here’s What’s Actually on the Launch List

    DTCC’s Tokenization Service Is Due This Month. Here’s What’s Actually on the Launch List

    The company that settles almost every U.S. stock trade is about to let some of those stocks move as tokens. Its newest launch sheet also answers the question crypto timelines keep asking: which blockchains are actually on the list.

    The Depository Trust & Clearing Corporation (DTCC) has said its Tokenization Service will open in October 2026. A one-page “Day 1” tear sheet and roadmap, dated Oct. 23 and posted on DTCC’s learning site, lays out what the service does at launch and what comes later.

    What is on the Day 1 list

    • 34 securities available to tokenize at launch. An overview DTCC published on Oct. 16 put that number at 25, as CantonNews and TokenPost reported at the time. The tear sheet does not name the 34.
    • About $30 trillion of assets eligible to be tokenized over time. DTC holds more than $114 trillion in total, according to DTCC.
    • Three asset types: select large-cap Russell 1000 stocks, select ETFs, and a select set of U.S. Treasury bills, notes and bonds.
    • Two networks live at launch: the Canton Network (CIP-56 token standard) and Besu, DTCC’s own private network (ERC-20).
    • Two networks “anticipated in 2027”: Stellar (SEP-41) and Circle’s Arc (ERC-20), plus “additional L1s and L2s aligned with client and market demand.”

    How it works

    Each token is backed one-for-one by a security held at DTC and keeps the same CUSIP, the same rights and the same investor protections as the regular, book-entry version. DTC keeps the official books and records.

    DTC participants place conversion orders through a web interface or an API from 2 a.m. to 6 p.m. ET on business days, with a target of 15 minutes or less. After that, tokens can move peer-to-peer 24/7, but only between DTC-registered wallets on the same network. Wallet registration opens at launch for “select third-party wallets.”

    The tokens are “compliance-enabled” with transfer restrictions. DTCC’s product page says DTC-issued tokens include mint, burn, pause and clawback functions. For Treasuries, interest payments and maturities are handled on-chain from day one, with the cash paid in regular dollars to participants’ traditional accounts.

    The roadmap for 2027 and beyond lists more eligible securities, single sign-on and maker-checker controls, corporate-action servicing for stocks and ETFs, one combined stock record across book-entry and on-chain positions, and “settlement and collateral, including on-chain netting and digital cash.” DTCC says the roadmap is “indicative and subject to change” and tied to the SEC no-action letter.

    The date

    DTCC itself has said October. The most specific date in public comes from John Hallahan, a Fireblocks director, who said in an Oct. 17 video interview: “DTCC’s tokenization service is launching at the end of the month. I believe it’s on the 28th.” Hardwire did not find a DTCC announcement confirming Oct. 28.

    The service runs under an SEC staff no-action letter from December 2025 that lets DTC operate a defined tokenization service for three years. In July, more than 30 firms took part in limited production trades on Canton and Besu, according to DTCC.

    What is not on the list

    Posts circulating on X say XRP, XLM and HBAR are “already inside” the launch. The tear sheet does not say that. The XRP Ledger and Hedera are not named anywhere on it. Stellar is named, but for 2027, not Day 1. Some of the claims point to Fireblocks, which supports many blockchains, but Fireblocks’ own chain support is not DTCC’s network list.

    For Canton, Day 1 is the headline: it is one of only two networks at launch, and the only one not run by DTCC.

    Sources: DTCC (Tokenization Service tear sheet and roadmap, Oct. 23, 2026; Tokenization Service product page; May 4, 2026 press release); DTCC Learning Center; CantonNews; TokenPost; Crypto Briefing; CoinTurk News.

  • Wall Street Is Coming to Ripple’s House. Watch What It Buys, Not What It Says.

    Wall Street Is Coming to Ripple’s House. Watch What It Buys, Not What It Says.

    Opinion. Ripple’s Swell conference runs October 27–29 at The Shed in Manhattan, and on paper it’s the company’s biggest yet. Ripple’s own Swell site lists more than 1,500 attendees, more than 80 sessions, more than 100 speakers and three stages. For the first time, Ripple is folding in Apex, its XRP Ledger summit, and UBRI Connect, its university research conference.

    The guest list is the headline. Ripple’s lineup announcement names Laide Majiyagbe, BNY’s global head of markets; Michael Blaugrund, vice president of strategic initiatives at Intercontinental Exchange and a former NYSE chief operating officer; and Johann Kerbrat, who runs crypto and international at Robinhood. Bullish CEO Tom Farley and Ripple CEO Brad Garlinghouse are both on stage. Coverage from Coinpaper and Bitcoin News also lists CME Group chairman and CEO Terrence Duffy. Matt Damon and Water.org co-founder Gary White are there to talk about using Ripple Payments and RLUSD for water and sanitation funding.

    Credit where it’s due. When Swell started in 2017, Ripple was a crypto company asking banks to take its calls. This year, the people who run custody, exchanges and clearing are flying to Ripple’s event. That’s a real shift, and Ripple earned it.

    Now the part the hype accounts won’t tell you. Read the agenda topics: tokenized money market funds, stablecoins in “bank-grade production,” onchain collateral, settlement, liquidity. Most of that runs on dollars and tokenized securities, not on buying XRP. Even Coinpaper, which covered the lineup warmly, said Ripple’s growth “should not automatically be interpreted as increased demand for XRP,” because many institutional uses run on RLUSD or tokenized assets instead. The XRP Ledger’s proposed native lending feature still needs validator approval. A separate cleanup upgrade has slipped to a conditional November 4 activation target.

    Speculation, labeled: Wall Street usually shows up to a conference like this to learn what it can bring in-house, not to hand over the keys. When big incumbents talk about “the future of finance” on a crypto stage, the future they mean usually looks a lot like their present, with faster settlement. If that’s the takeaway from Swell, it’s good news for Ripple the company and the institutions that adopt it. Whether it’s good news for the retail XRP holder is a separate question that nobody on stage is paid to answer.

    Speculation, labeled: XRP community accounts tend to build up a “big announcement” before every Swell. Ripple has used the event to roll out products and partnerships before, so the hope isn’t crazy. But nothing has been confirmed. Coinpaper reports that Ripple and DriveWealth will hold an October 28 session on using RLUSD for brokerage funding and settlement, but no new product launch has been announced. If you’re trading on a headline that doesn’t exist yet, you’re the exit liquidity for the people who sold the rumor.

    What to watch this week: any signed, named deployment with dates and dollar amounts, any bank saying on the record that it will hold or settle in XRP itself, and any movement on the XRP Ledger’s lending amendment. Applause is free. Contracts aren’t.

    Sources: Swell 2026 official site; Ripple, “The Swell 2026 Lineup Is Here”; Coinpaper; Bitcoin News.

    This is opinion, not investment advice.

  • Bitcoin Holds Near $80,000 After Weekend Selling Hit Leveraged Longs

    Bitcoin Holds Near $80,000 After Weekend Selling Hit Leveraged Longs

    Bitcoin traded at about $80,460 early Sunday, roughly flat over 24 hours, according to CoinGecko data at 8:08 a.m. ET. That followed a Saturday-morning slide below $80,000, to its weakest level in more than a month, according to CoinDesk. The Block’s price data put Saturday’s low at about $79,280 around 11:20 a.m. ET before a rebound to roughly $80,140 by 1 p.m.

    Ether was about 1% lower over 24 hours early Sunday at roughly $2,336, and solana was little changed near $101, while XRP was up about 1.5% at $1.30, CoinGecko data showed. On Saturday morning, all three had been down between 3% and 4% over 24 hours, CoinDesk reported.

    Most of the damage landed on traders betting on higher prices. In the four hours to 1 p.m. ET Saturday, $436.4 million of crypto futures positions were liquidated, and $404.2 million of that came from longs, according to CoinGlass data cited by The Block. Two 15-minute bursts, starting at 10:15 a.m. and 11:15 a.m., accounted for about $339 million of long liquidations. Ether positions made up $136.7 million of the four-hour total, close to bitcoin’s $158.5 million. The pace has since slowed. CoinGlass’s 24-hour count for the 20 most-liquidated coins stood at $452.9 million as of about 3 a.m. ET Sunday, with $391.1 million from longs, TokenPost reported.

    Fund flows had already turned. U.S. spot bitcoin exchange-traded funds recorded net outflows of $635.6 million on Thursday and $137.9 million on Friday, according to Farside Investors, about $773 million over the two days. SoSoValue data reported by The Block show nearly identical figures. Farside’s Friday total is still provisional, with one fund yet to report. Even after the two down days, the funds were still net positive for the week, by about $305 million on SoSoValue’s count.

    The selling came as markets digested reports about U.S. staffing in the Middle East. The Wall Street Journal reported Saturday that the U.S. is evacuating personnel from embassies and bases in the region, CoinDesk said. The State Department’s own Saudi Arabia travel advisory, dated Oct. 23, says it ordered non-emergency government employees and their families to leave that country. The Associated Press reported that the department is also reducing staff at embassies in Jordan, Lebanon, Qatar and the United Arab Emirates, which remain open. Hardwire Crypto has not established a direct link between those reports and the price move.

    BitMEX co-founder Arthur Hayes posted “I dumped it all” on X at about 2:18 a.m. ET Saturday, The Block reported.

    Sources: CoinGecko, CoinDesk, The Block, TokenPost, Farside Investors, U.S. Department of State, Associated Press

  • Bank of Israel Says Crypto Cannot Be Used to Get Around Sanctions

    Bank of Israel Says Crypto Cannot Be Used to Get Around Sanctions

    The Bank of Israel said Saturday that cryptocurrencies “cannot serve as a means to circumvent sanctions,” a day after Prime Minister Benjamin Netanyahu said he had asked for a plan involving blockchain to prepare for possible sanctions, including banking sanctions.

    The statement, quoted in translation from Hebrew by Globes, the Times of Israel and Ynet, went on: “The right course for the Israeli economy is to maintain economic relations with our primary trading partners and to focus on preventing sanctions and their negative impact on the economy. This is the responsibility of the political leadership, and it should act upon it.” The Times of Israel rendered the opening line as crypto “cannot be used as a route for bypassing sanctions.”

    As of Saturday afternoon ET, the statement did not appear on the press release page of the bank’s English-language website.

    Netanyahu made the remarks in an interview with Roy Katz broadcast Friday, Oct. 23, on Channel 10, Israel’s economic news channel. “We need to understand that there could be sanctions, including banking sanctions. You need to prepare an economy that can bypass them,” he said, according to a translation by The Block. “I’m working on that too.” Asked whether blockchain was the alternative, he answered, “One of them, certainly. And I have already requested that a plan for this should be prepared,” in Globes’ translation.

    He did not say which countries might impose such sanctions, who would draw up the plan, which networks or currencies it might use, or when. Ynet reported that officials in Israel’s economic ministries and the Prime Minister’s Office said they knew of no such plan. A senior economic official told Channel 12 that “the idea will certainly not achieve its goal. Even talking about it could harm the economy,” the Times of Israel reported. Separately, 109 senior economists, business executives and former public officials, writing as the Economists’ Forum, said in a joint statement that they felt “grave concern and anxiety” over the remarks, the Times of Israel reported.

    The remarks followed sanctions announced by Britain and 11 other Western countries on goods from Israeli settlements in the West Bank, the Times of Israel reported. Israelis vote in a general election on Oct. 27.

    Speaking to Channel 14 on Saturday evening, Netanyahu did not withdraw the idea. “We have other means; crypto is one of them — it is not the sole method, and it is not certain that it will actually be used,” he said, according to Globes. “I thank the Bank of Israel for their advice, but I do what I think is right.”

    Sources: Globes, The Times of Israel, Ynet, The Times of Israel (Economists’ Forum), The Block

  • Keystone Says Website Breach Exposed Customer Shipping Data, Not Keys or Seeds

    Keystone Says Website Breach Exposed Customer Shipping Data, Not Keys or Seeds

    Hardware wallet maker Keystone said Saturday that a third party obtained customer shipping information from its official website, and it apologized to affected buyers.

    “On October 20, we detected unauthorized access to our official website,” the company wrote in a notice posted on its verified X account on Oct. 24. “After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information.”

    According to the notice, the exposed data were “names, contact details, shipping addresses, and order details (items and prices).” Keystone said payment card or bank details, recovery phrases, private keys and wallet passwords were not exposed.

    “We’ve blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers,” the company said. It has not said how many customers were affected or what period of orders the data covers. Customers asked on X how far back the affected orders go. Keystone did not give a range, and said in replies that it is “still conducting a thorough investigation and will publish a detailed report in the coming days.”

    The bigger risk now is impersonation. Keystone warned that “scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or ‘fixes’ for your order or address. None of it is from us.”

    The company’s guidance to customers, in its own words:

    • “NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn’t order. We will never ask for them.”
    • “Don’t click links in unexpected messages.” Type the company’s web address, keyst.one, directly.
    • “Trust only our official channels. If anything feels off, email support@keyst.one.” (The notice says this applies until its detailed report is out.)

    Hours before the notice, at about 1 a.m. ET Saturday, Keystone said on X that it had opened an urgent investigation after a customer reported a scam call that used details from a 2024 order. Hardwire Crypto has not independently verified the customer’s account.

    “A detailed report is coming soon,” the notice said. “Again, we’re truly sorry to everyone affected.”

    Sources: Keystone Hardware Wallet on X

  • $150 Million Landed on the XRP Ledger. One Wallet Got All of It.

    $150 Million Landed on the XRP Ledger. One Wallet Got All of It.

    The headline sounds like a win for the XRP Ledger: Franklin Templeton put about $150 million more of its tokenized money market fund on the chain this week. Read the fine print, though, and it looks less like a crowd rushing in and more like a big firm moving money through its own pipes.

    The facts first

    CoinDesk reported that Franklin’s issuing account recorded two $75 million cash subscriptions on the ledger. Two batches of just over 72.18 million shares each followed early Thursday, UTC, at a share price of $1.039.

    The fund is the Singapore-domiciled Franklin OnChain U.S. Dollar Short-Term Money Market Fund, ticker sgBENJI on the XRP Ledger. It holds short-term dollar debt such as government paper, commercial paper and bank deposits.

    Here’s the part that matters. Every one of those shares went to a single wallet. That wallet now holds all of the fund’s tokens on the XRP Ledger, roughly 192.7 million shares, or about $200 million at Thursday’s price.

    We checked the public ledger ourselves Saturday morning. The receiving wallet and Franklin’s issuing account list the same eight signing addresses, and any two of them can approve a transaction. The token’s settings require Franklin’s approval to hold it, and let Franklin lock balances and claw tokens back.

    CoinDesk asked Franklin whether the wallet is an omnibus account, how many investors are behind the money, and whether they’ll ever get their own addresses. Franklin had not responded by the time CoinDesk published.

    Why it bugs me

    Crypto was sold to regular people as money nobody could freeze, run on a ledger anyone could check. What we’re getting from Wall Street is the opposite: the ledger is public, but the gate, the keys and the off switch all stay with the issuer.

    To be fair, none of that is hidden. Franklin’s fund documents describe a register that links ledger entries to real-world identities kept off-chain. Brokers hold shares for many clients in one account every day. Freeze and clawback powers are standard for a regulated fund.

    But “regulated and normal” is not the same thing as “adoption.” When $150 million lands in one wallet controlled by the same signers as the issuer, the chain is mostly acting as Franklin’s filing cabinet.

    Speculation, clearly labeled

    This is speculation, not reporting: my guess is this wallet is a holding account Franklin or its distribution partners run for clients, not $150 million of fresh outside demand for XRP Ledger products. If so, the “XRPL just got $150 million” posts are cheering a bookkeeping entry. I could be wrong. Franklin can settle it with one sentence about who owns the shares.

    Also worth saying for XRP holders: the coin itself barely figures here. These tokens pay tiny network fees in XRP and nothing more. The XRP Ledger’s own lending tools, which would let funds like this be pooled and lent on-chain, still don’t have the validator votes to switch on.

    Tokenized funds may well be the future of the plumbing. I just want the plumbing labeled honestly. Show us how many holders there are, not just how many dollars.

    Sources: CoinDesk; XRP Ledger public records (XRPSCAN, XRPL mainnet nodes); Franklin Templeton fund documents (as cited by CoinDesk); RWA.xyz.

    This is opinion, not investment advice.

  • Malaysia and Thailand Join Singapore’s BLOOM Project for Cross-Border Stablecoin and Tokenized-Deposit Settlement

    Malaysia and Thailand Join Singapore’s BLOOM Project for Cross-Border Stablecoin and Tokenized-Deposit Settlement

    Singapore’s central bank says two of its neighbors are now inside its project to move money across borders with stablecoins and tokenized bank deposits.

    The Monetary Authority of Singapore (MAS) announced on Oct. 23 that Bank Negara Malaysia and the Bank of Thailand have joined BLOOM as “policymaker members.” BLOOM stands for Borderless, Liquid, Open, Online, Multi-currency.

    MAS also named nine new industry participants: Airwallex, Mastercard, Maybank, Monee, Nium, Ripple, ShopeePay, Visa and the World Bank Group. They join a list that already included Anchorage Digital, Ant International, Circle, Coinbase, DBS, J.P. Morgan, Kasikornbank, OCBC, Partior, Schroders, Standard Chartered, StraitsX, Stripe, Temasek, UOB and Xweave.

    What BLOOM is trying to fix

    Banks that want to pay each other in digital money across borders today often need a separate deal with each partner and each market. MAS says BLOOM aims to build shared frameworks so they don’t have to, which it says should cut costs and speed up launches.

    The settlement assets in view are tokenized commercial bank money and stablecoins “that meet regulatory expectations,” according to MAS. The project builds on Project Orchid, Singapore’s earlier work on a digital Singapore dollar.

    MAS listed three work areas:

    • Acceptance and settlement: how banks accept different forms of digital money in cross-border deals, how counterparties contract, and how trades finally settle.
    • Interoperability: how separate digital money systems can work across networks and borders.
    • Programmable controls: safeguards such as identity checks, sanctions screening and transaction controls built into the payment itself.

    What the central banks said

    “The future of finance will involve multiple forms of digital money operating across different institutions and markets,” said Leong Sing Chiong, MAS deputy managing director for markets and development.

    Bank Negara Malaysia Deputy Governor Aznan bin Abdul Aziz said frictionless cross-border payments using multiple digital monies are “now closer to a tangible reality than a far-fetched fantasy.”

    Bank of Thailand Deputy Governor Daranee Saeju said the work would help inform “forward-looking regulatory approaches for tokenised money, particularly in cross-border payments and wholesale settlement,” while keeping oversight “prudent, proportionate, and responsive to evolving risks.”

    What it is not

    This is a coordination project, not a product launch. The MAS release does not name a go-live date, a single token or a single blockchain. Central bank membership means the three regulators will shape the rules as the frameworks are written. It does not mean any of them has approved a specific stablecoin for cross-border use.

    For XRP Ledger watchers, Ripple’s name on the list is the hook. The Block reported that Ripple has said its BLOOM work involves testing trade payments with its RLUSD stablecoin on the XRP Ledger. MAS’s release does not single out any network.

    MAS did not publish expected volumes or a timeline for live cross-border transactions.

    Sources: Monetary Authority of Singapore (media release and BLOOM page, Oct. 23, 2026); The Block; The Business Times.

  • ‘Not True at Present Time’ Is Doing a Lot of Work in the Visa–Fireblocks Rumor

    ‘Not True at Present Time’ Is Doing a Lot of Work in the Visa–Fireblocks Rumor

    Opinion. Let’s start with what’s known, because it’s not much. On Thursday, Axios reported, citing multiple unnamed sources, that Visa is in late-stage talks to acquire Fireblocks for about $2.5 billion. Fireblocks provides stablecoin infrastructure and crypto custody to institutions. Within hours, a Fireblocks spokesperson told CoinDesk: “We are aware of the rumors about a possible acquisition of Fireblocks by Visa. This is news to us, and not true at present time.” Visa declined to comment. Coinbase, which anonymous sources had told CoinDesk was also in the frame as a buyer, denied that it was involved.

    So, to be clear up front, this is an unconfirmed report that has been denied by the company being sold. Nobody has signed anything that anyone has shown the public.

    Still, read that denial again. “Not true at present time.” It isn’t “false,” and it isn’t “we are not for sale.” It’s a statement about today. Companies choose those words carefully, and these ones leave the door wide open. Speculation, labeled: when a company’s denial carries an expiration date, the market is right to treat it as a pause, not a no.

    The number is the real story, if it turns out to be real. In 2022, Fireblocks raised $550 million at an $8 billion valuation. A $2.5 billion sale would be less than a third of that. CoinDesk also reports that talk of a possible sale has been circulating for three to four weeks. Speculation, labeled: a down-round exit would tell you the 2021–22 private crypto marks were never as solid as the press releases made them sound. Somebody will be taking a haircut, and it won’t be announced with a cheerful blog post.

    Then there’s the strategic question. Axios framed the report around traditional finance picking up the pace of stablecoin adoption. Picture what that means in practice. Fireblocks says on its own profile that more than 2,500 institutions use it for stablecoins, custody and digital asset operations. Put that plumbing inside one of the biggest card networks on the planet, and the “decentralized” future starts running through the same tollbooth as the old one.

    Speculation, labeled: this is what institutional adoption usually looks like. Not a revolution, but the incumbents buying the rails before the public notices the rails matter. Nobody will vote on it, and nobody will be asked. It’ll show up as a closed deal and a press release about “innovation.”

    To be fair to everyone involved: Fireblocks has built real infrastructure that serious institutions rely on, and Visa has been open about working with stablecoins. If a deal happens, it could make crypto payments easier for ordinary people. That’s a genuine upside. But who holds the keys matters, and it’s worth asking before the ink dries, not after.

    For now: watch for a Visa filing or a formal statement, and watch whether that “at present time” language changes. Until then, it’s a rumor with a denial attached, and you should treat it that way.

    Sources: Axios; CoinDesk; Fireblocks

    This is opinion, not investment advice.

  • Coldcard Maker Coinkite Faces Proposed Class Action Over Seed-Generation Flaw

    Coldcard Maker Coinkite Faces Proposed Class Action Over Seed-Generation Flaw

    Coinkite Inc., the Toronto maker of Coldcard bitcoin hardware wallets, and co-founders Rodolfo Novak and Peter D. Gray have been named in a proposed class action in the Ontario Superior Court of Justice. The statement of claim was issued Sept. 11 and surfaced this week on the Canadian Bar Association’s class action database, which lists the case as not certified. The allegations are unproven.

    The plaintiff is Amir Reza Naderi of Los Angeles, represented by Foreman & Company of London, Ontario. He says he bought a Coldcard Mk3 in 2022. According to the claim, 1.22940052 BTC, worth about $79,764, was taken from his wallet without authorization on Aug. 6.

    The suit alleges that since about March 2021, Coldcards generated recovery phrases with MicroPython’s Yasmarang software generator instead of the hardware random number generator Coinkite advertised. The claim says the generator relied on predictable inputs such as the device serial number, which left the phrases open to reconstruction.

    Coinkite’s July 30 advisory describes the same mechanism as a “build and link integration error.” It covers two groups of seeds. The first is seeds made on Mk2 and Mk3 firmware 4.0.1 through 4.1.9. The second is seeds made on Mk4, Mk5 and Q models before firmware 5.6.0 or 1.5.0Q. Coinkite estimates effective entropy fell to about 40 bits on older models and 72 bits on newer ones, against a 128-bit target. It says attackers regenerated seeds offline and the devices were not hacked. Fixed firmware is available, but the company says updating “does not change or repair an existing seed,” so affected owners must move to a new seed.

    The claim says thefts began on or about July 30 and puts class losses above $140 million. That figure is the plaintiff’s, and the filing does not explain how it was calculated. Galaxy Research, which tracks the thefts on-chain, attributed 1,789.28 BTC to the exploit with high confidence as of Aug. 24. That was about $114.7 million when taken.

    The suit also alleges that bitcoin engineer James O’Beirne warned Coinkite of “the Defect and other flaws” in May 2025. He has not commented publicly. On July 30, Coinkite wrote: “We were unaware of the bug until today.”

    Naderi seeks certification, damages under Ontario consumer-protection and sale-of-goods law, negligence and contract damages, and punitive damages. The claim names no total dollar figure. It also challenges the arbitration and class-proceeding limits in Coinkite’s terms of sale.

    Coinkite told Bitcoin.com News it “can’t comment on pending litigation” and expects to publish a full postmortem within days. As of Friday morning, its Coldcard security page still said a detailed technical postmortem “remains in preparation.” Hardwire found no statement of defence in the public record.

    Sources: Ontario Superior Court of Justice (statement of claim, via the Canadian Bar Association class action database); Coinkite; Galaxy Research; Bitcoin.com News