Security alert · Coldcard hardware wallet

Move your Bitcoin off any Coldcard seed created since March 2021 — today.

A firmware bug made affected Coldcards generate seed phrases with a predictable software RNG instead of the chip's hardware RNG. Attackers have already reconstructed the private keys offline and drained roughly 1,719 BTC across three confirmed waves, without ever touching a device — and a suspected fourth wave is still being traced. Updating the firmware does not repair a seed that already exists. If your seed was generated on a Coldcard on or after March 2021, treat it as compromised: move the coins now to a new seed on patched firmware, to a different hardware wallet, or — if you need somewhere immediately — to an exchange you already use, and sort out longer-term custody after the coins are safe.

Watch for follow-on scams. Events like this draw fake “migration” and “wallet checker” sites. Coinkite will never ask for your seed words, and no legitimate tool needs them. Type coldcard.com in by hand rather than following links from social media or email.

Am I affected? Version list and migration steps

The flaw cut seed randomness from the intended 128 bits to roughly 40 bits on Mk2/Mk3 and 72 bits on Mk4/Mk5/Q. Your seed is at risk if you generated it on the device while running:

  • Mk2 / Mk3 — 4.0.1 through 4.1.9
  • Mk4 / Mk5 — anything before 5.6.0 (standard) or 6.6.0X (Edge)
  • Q — anything before 1.5.0Q (standard) or 6.6.0QX (Edge)

Two exceptions. Coinkite states seeds are not at risk from this bug if you supplied at least 50 fair, independent rolls through Add Dice Rolls and those rolls were never recorded or exposed. Seeds generated before firmware 4.0.1 (March 2021) are also outside the affected range. If you are not certain which applies to you, assume you are affected and move the coins.

If a sweep is already under way. Galaxy Research reports that some fourth-wave transactions have replace-by-fee enabled. If you find an unconfirmed transaction spending from your address sitting in the mempool, you may have a short window to broadcast your own higher-fee transaction and move the coins before the attacker's confirms. Galaxy also counts at least 15 separate attackers working through the remaining vulnerable addresses, so assume the sweeping is still going on.

Migration. Update the firmware, generate a brand-new seed, verify the backup and a receive address, send a test transaction, then move the remaining funds. Keep the old backup until the migration is confirmed.

Independent tracing by Galaxy Research attributes roughly 1,719 BTC (about $111M) drained across three confirmed waves, as of Aug 7, 2026 — up from 1,596 BTC on Aug 4, when Galaxy last put the address count at about 7,300. Counting a suspected but still unconfirmed fourth wave, Galaxy puts the possible total near 2,055 BTC (~$130M) across more than 7,700 addresses. Figures were still rising at the time of writing. Bitcoin Lending Intel is not affiliated with Coinkite and this is not financial advice. Verify firmware versions and guidance against Coinkite's own advisory before acting.
Lender review Medium relative risk CeFi · Native BTC Updated 16 Jul 2026

Lantern Finance Bitcoin loan review

A new US lender offering one of the lowest flat rates on the market — 8% for every borrower — with a conservative 50% LTV, native bitcoin in insured BitGo custody, and a 72-hour grace period before liquidation. Here’s the full picture.

Headline APR8% fixed
Max initial LTV50%
Liquidation LTV75% (call 65%, 72h grace)
Term12 months
Fees2% upfront (no liq/prepay fees)
CollateralNative BTC
CustodyBitGo (qualified custodian)
Minimum loan$1,000

Verified against lantern.finance on 9 August 2026. Terms change; confirm before borrowing.

Quick verdict Lantern pairs a market-low 8% flat rate with conservative risk controls — 50% maximum LTV, a 72-hour grace period after a 65% margin call, and no liquidation fees — plus insured BitGo custody. The main caveat is that it’s brand-new, so it lacks a multi-cycle track record.

How Lantern works

Lantern Finance is a US-based, FinCEN-registered lender offering fixed-rate crypto-backed loans. You borrow up to 50% of your crypto’s value at a flat 8% for 12 months; collateral is held by BitGo, a qualified US custodian, in insured cold storage. When the loan is repaid, your collateral is returned. Lantern supports Bitcoin plus a range of other assets, with a low $1,000 minimum and no prepayment penalty.

Rates & fees

Lantern’s headline is simplicity: a flat 8% fixed rate for every borrower, regardless of loan size — among the lowest CeFi rates available. There is a 2% upfront fee (taken from loan proceeds at funding) and no size tiers, no liquidation fees, and no prepayment penalties. Interest is paid over the 12-month term.

LTV & liquidation

Lantern caps initial LTV at a conservative 50%. If your LTV rises to 65% it issues a margin call and gives you a 72-hour grace period to top up or pay down before any action — unusually borrower-friendly. Liquidation only occurs at 75% LTV, and even then Lantern says it sells just enough collateral to restore a healthy ratio, with no liquidation fee.

Custody & safety — why we rate Lantern Medium relative risk

Source: Lantern custody & BitGo FAQ ↗

Lantern custodies collateral with BitGo, a qualified US custodian that holds assets 1:1 (no lending or trading of client assets) with $250M of insurance, and Lantern is a FinCEN-registered MSB with full KYC/AML. Combined with a conservative 50% LTV and a 72-hour grace period, the risk controls are strong. We rate it Medium rather than Lower only because it is brand-new (launched 2026) and has no multi-year, multi-cycle track record yet. See the risk methodology.

What a $100,000 Lantern loan costs

Loan amount$100,000
Collateral at 50% LTV~$200,000 BTC
Fixed rate8%
Approx. interest, 1 year~$8,000

At 8% flat, Lantern is among the cheapest fixed-rate CeFi options. Figures illustrative.

Pros & cons

Strengths

  • Market-low 8% flat rate (all loan sizes)
  • Conservative 50% maximum LTV
  • 72-hour grace period before liquidation
  • No liquidation or prepayment fees
  • Insured BitGo qualified custody (1:1, no rehypothecation)
  • Low $1,000 minimum

Trade-offs

  • Brand-new operator (no track record through a downturn)
  • US borrowers only
  • 50% max LTV limits borrowing power
  • Smaller company

Who Lantern is best for

Lantern suits borrowers who want the lowest fixed rate with conservative, borrower-friendly risk controls and don’t mind a newer name. If you want a longer track record, compare Strike or Ledn; for the strongest custody model, see Unchained.

FAQ

What is Lantern Finance's interest rate?

A flat 8% fixed rate for every borrower, regardless of loan size — one of the lowest CeFi rates available — on a 12-month term.

How is my Bitcoin secured at Lantern?

By BitGo, a qualified US custodian, in insured cold storage held 1:1 (never lent or traded), with $250M of insurance.

When does Lantern liquidate?

A margin call is issued at 65% LTV with a 72-hour grace period; liquidation only happens at 75% LTV, with no liquidation fee.

Is Lantern safe?

It uses BitGo qualified custody, a conservative 50% LTV and a 72-hour grace period, and is a FinCEN-registered MSB. We rate it Medium relative risk mainly because it is brand-new. No loan is risk-free.

See Lantern next to every other lender

Live rates, LTV, liquidation thresholds, custody, and minimums for every lender we track in one verified table.

Open the comparison →

Get weekly Bitcoin loan rate changes

One short email a week: which lenders moved rates, new terms, and shifts in liquidation risk. Free, no spam, unsubscribe anytime.