Bitcoin Will Never Be the Same Again | Alex Thorn

— Bitcoin likely bottomed near $58K in July/August 2025 based on historical cycle patterns, despite compressed volatility and reduced amplitude compared to prior cycles.

— The Coldcard hardware wallet exploit resulted in approximately 1,800 BTC ($116M–$130M) stolen from long-term self-custody holders, with 90% still held by attackers in initial collector addresses.

— Victims of the Coldcard exploit did everything correctly—used cypherpunk hardware, self-custody, no exchange exposure—yet were compromised by a five-year-old entropy generation vulnerability in the device firmware.

— The exploit displays multiple distinct attacker waves and "footprints" with different operational security patterns, suggesting both amateur and sophisticated actors; wave one likely leaked identity to a paid RPC data service.

— AI-enabled vulnerability discovery is dramatically altering the threat surface for all software; the Bitcoin community's red-team audit effort led by Rob from Anchor Watch is a necessary response to the "Clanker Wars."

— Reduced Bitcoin volatility reflects market maturation and growing institutional adoption rather than a ceiling on long-term upside; cycle bottoms remain a stronger indicator than cycle tops.

— If you hold Bitcoin in single-signature self-custody, consider spreading holdings across multiple devices or transitioning to collaborative multisig solutions (Nunchuk, Casa, Unchained, Anchor Watch, Liana) to reduce single-point-of-failure risk, especially after the Coldcard compromise.

— Do not assume one hardware wallet manufacturer or one self-custody method is bulletproof; the Coldcard vulnerability was unfound for five years despite open-source code, underscoring the need for redundancy, passphrases, and third-party audit participation in the Bitcoin ecosystem.

— If you are uncomfortable managing self-custody after recent events, storing Bitcoin on a regulated exchange (e.g., River) is preferable to a spot Bitcoin ETF, since you retain the ability to withdraw actual coins and transport them globally if needed, whereas ETFs offer only economic exposure.