Coldcard exploit hits 4,500 wallets and $89M in losses as Bitcoin holds near $63K

The dominant story today is the Coldcard hardware wallet exploit, which has escalated from an isolated incident into a systemic self-custody concern. The attack now spans 4,500 compromised addresses with losses approaching $89 million — a scale that puts it among the larger wallet-level security events in recent years. Hardware wallets like Coldcard are marketed as the gold standard for keeping crypto off exchanges and out of reach of hackers; an exploit at this layer shakes a foundational assumption for long-term holders. Bitcoin's muted +0.70% gain to $63,387 suggests the market is absorbing the news rather than panicking, but the Fear & Greed index at 27 — deep in Fear territory — reflects how little cushion sentiment has right now. The second major story is regulatory. The SEC has agreed to revisit its earlier approval of Nasdaq-listed Bitcoin options following a formal challenge from CME Group (the Chicago Mercantile Exchange, which runs competing Bitcoin futures and options markets). This review introduces uncertainty around a product that institutional traders had been counting on as a new hedging tool. It does not cancel the approval outright, but it reopens a process that the market had considered settled. On the macro side, a Reuters report alleges that an Iran-linked exchange routed $676 million through Binance in a sanctions-evasion scheme. Binance has faced regulatory scrutiny before — most recently its 2023 DOJ settlement — and a fresh allegation of this scale carries real reputational and legal risk for the exchange. BNB, Binance's native token, fell 1.0% on the day, the weakest performer among the large-cap tracked assets, though the move was modest relative to the severity of the allegation. Cardano's 9.3% surge stands apart from the rest of the market. No specific news item explains it cleanly; the most plausible read is that traders rotated into a deeply oversold layer-1 asset as a speculative bet, with the low Fear & Greed reading creating conditions where short-covering can produce outsized moves.

• –The SEC's review of Nasdaq Bitcoin options — triggered by a CME challenge — does not cancel the product but reopens regulatory proceedings that institutional traders had considered closed.
• –Reuters reports that an Iran-linked exchange routed $676 million through Binance in an alleged sanctions-evasion operation, a development that poses fresh legal and reputational risk to the world's largest crypto exchange.
• –Russia has extended its cryptocurrency mining ban to the Moscow region through 2032, further reducing one of the world's historically significant mining geographies.
• –Bitcoin mining difficulty has fallen 14% from its 2026 peak as depressed prices squeeze operator revenues, a signal that a meaningful portion of the network's least-efficient miners have gone offline.