The Coldcard exploit became the largest contributor, showing that even infrastructure specifically designed to improve security can become a systemic point of failure
A modern crypto transaction can depend on multiple layers: a hardware wallet, firmware, wallet software, a frontend, smart contracts, bridges, oracles, RPC providers, and third-party libraries. Each additional link introduces another potential point of compromise, meaning that securing private keys alone is no longer enough to secure the entire transaction chain. The Coldcard incident illustrates this problem particularly well: a vulnerability at the hardware-wallet level was able to affect many otherwise independent users at the same time.
At the same time, attackers are…
