Two distinct stories shaped the Bitcoin conversation this weekend: a significant self-custody security patch and the aftermath of a rally that caught a lot of traders badly off guard.
Coldcard Addresses a $130 Million Exploit
Coinkite, the company behind the Coldcard hardware wallet, released new firmware this week after a vulnerability contributed to roughly $130 million in Bitcoin losses, according to Decrypt. The update makes a meaningful procedural change: users must now inject their own randomness when generating wallet seeds, rather than relying solely on the device's built-in entropy. Additional security issues uncovered during a three-week internal review were also patched in the same release.
This matters beyond just Coldcard owners. Hardware wallets are widely considered the safest way to hold Bitcoin outside of institutional custody, and any confirmed exploit against one of the category's most respected devices raises questions that every self-custody user should think through. The fix is available now. If you use a Coldcard, updating your firmware is the straightforward next step.
What Actually Drove This Week's Rally
Bitcoin touched nearly $80,000 before easing back to around $77,168 as of this morning — still its strongest position since mid-May. Several forces converged to produce that move, and it's worth separating them clearly.
The most mechanical factor was a historic short squeeze. According to Decrypt, roughly $1.21 billion in bearish positions were liquidated in a single day as Bitcoin surged 7.9%. Traders who had been betting on further price declines were forced to buy back their positions, which accelerated the upward move regardless of any underlying fundamental change.
Beneath the squeeze, CoinDesk points to a specific policy action: the U.S. Treasury adjusted its buyback program in a way that pulled long-term yields down from 19-year highs. Analysts quoted by CoinDesk were careful to say this is not quantitative easing, but the effect on risk appetite was real. Lower long-term yields tend to make yield-free assets like Bitcoin relatively more attractive to institutional allocators.
On the institutional side, Pantera Capital's portfolio manager told Bitcoin Magazine that inflows from large, sophisticated buyers have been helping support the rebound — a different signal than the ETF-flow data alone would suggest. Speaking of ETFs: U.S. spot Bitcoin funds pulled in $606 million on Thursday, their largest single-day haul since May, with BlackRock capturing 83% of those inflows, per Decrypt.
Where Things Stand
Bitcoin is now consolidating after its best weekly performance since 2023. A few things to watch heading into next week:
- Regulatory clarity: Pakistan formally advanced its Virtual Assets Act this week, according to Bitcoin Magazine, signaling that more jurisdictions are moving toward structured frameworks rather than outright bans.
- Institutional conviction: Bridgewater Associates founder Ray Dalio reiterated support for Bitcoin alongside gold as a hedge against sovereign debt pressures, per Bitcoin Magazine — a signal of how some long-term macro thinkers are positioning.
- Security practices: The Coldcard patch is a reminder that even the best hardware requires active maintenance. Self-custody is only as strong as the software running it.
The consolidation near $77K after such a sharp move is typical. Whether the rally holds will depend on whether the macro conditions that sparked it — lower yields, regulatory progress, institutional buying — continue to develop in the same direction.
For anyone who holds or donates Bitcoin, the Coldcard story is a practical reminder that keeping wallet firmware current is basic stewardship of donated funds and personal holdings alike.