Swan CEO Explains After $100 Million Bitcoin Heist on Coldcard: This Is an Upgrade, Not an Escape for Self-Custody
Swan CEO Cory Klippsten stated that the security vulnerability in Coldcard wallets has not killed the self-custody culture; instead, it has transformed it into a stronger structure through multi-signature (multisig) systems.
Shaken by urgent messages while at a wedding in Paris, Swan CEO Cory Klippsten witnessed one of the Bitcoin ecosystem’s largest recent security tests. A vulnerability resulting from a March 2021 software update that went unnoticed for five years targeted Coldcard hardware wallet users, leading to the theft of 1,600 Bitcoin (BTC) from approximately 7,300 addresses. According to Galaxy Research data, this incident, which caused a loss of over $100 million, led to questions about the reliability of self-custody methods in the industry.
Klippsten explained that during the attack, his team dropped everything to support not only their own customers but everyone in need of help. Swan halted withdrawals for users at risk, while a volunteer team supported by OpenSats scanned over 150 open-source repositories to confirm that the issue had not spread to other wallets. As of now, 90 percent of the stolen assets remain dormant in the attackers’ wallets, and the relevant addresses have been reported to U.S. federal law enforcement.
A New Era for Self-Custody: Multisig Solutions
Emphasizing that investors have not given up on self-custody despite this massive loss, Klippsten stated that users are turning toward more secure multi-signature (multisig) systems. Noting an increase in interest for products like Swan Vault, which ensures funds remain safe if a single device is compromised or fails, the CEO argued that this process is not an escape but an upgrade.
Pointing to Bitcoin’s nature of growing stronger through challenges, Klippsten said that security tools are becoming more resilient by the hour. According to the industry leader, this painful experience could go down in history as one of the most educational and developmental events for the self-custody ecosystem. The fact that users now prefer systems that split security across multiple keys rather than relying on a single hardware wallet ensures the ecosystem is more resilient against future attacks.