Binance founder Changpeng "CZ" Zhao is urging cryptocurrency holders to spread their assets across multiple wallets, cautioning that even hardware devices can harbor flaws in the wake of a security incident tied to Coldcard that reportedly cost users around $70 million.
The Warning From CZ
Zhao, who founded the world's largest cryptocurrency exchange, took to social media to remind users that no single storage solution is entirely bulletproof. His comments came directly in response to the reported Coldcard exploit, which has rattled portions of the self-custody community that had long viewed hardware wallets as among the safest options for storing digital assets.
The central thrust of his message was simple: concentration of funds in a single device or wallet type creates a single point of failure. Even trusted hardware, he argued, is built by humans and can contain bugs that malicious actors may eventually discover and abuse.
Even the most trusted hardware wallet can carry hidden bugs, so never bet everything on a single device.
Why Diversification Matters
Hardware wallets are frequently marketed as a gold standard for protecting cryptocurrency because they keep private keys offline and away from internet-connected threats. But the Coldcard episode underscores that offline storage does not eliminate risk entirely, particularly when firmware or software vulnerabilities are involved.
By distributing holdings across several wallets — potentially from different manufacturers or using different security models — users can limit the damage if any one solution is compromised. The strategy mirrors traditional financial advice about not putting all of one's eggs in a single basket.
Zhao's guidance is likely to resonate given his prominence in the industry, though it also highlights ongoing tensions around self-custody, where users bear full responsibility for their own security decisions.
Practical Takeaways for Holders
For everyday investors and long-term holders, the incident serves as a reminder to review how and where their assets are stored. Security experts have long echoed similar sentiments about redundancy and risk management.
Key considerations for users looking to reduce exposure include:
- Splitting funds across multiple wallets rather than relying on one device
- Keeping firmware and software up to date to patch known vulnerabilities
- Considering wallets from different vendors to avoid shared points of failure
The $70 million figure attached to the Coldcard exploit illustrates the stakes involved, and CZ's intervention adds a high-profile voice to calls for