Solana Security Chief Discusses AI Threats After Coldcard Exploit
Solana published an interview with Michael Coates, the Solana Foundation’s chief information security officer, on September 19, examining how AI is changing crypto-security risks and defenses.
The discussion follows the Coldcard hardware-wallet incident, in which attackers drained roughly $116 million in Bitcoin from more than 5,200 wallets beginning July 30, according to Solana’s article.
TRM Labs separately reported that the incident exploited a firmware flaw that was five years old. The case illustrates the potential impact of a weakness affecting a widely used security product.
Online advertising service 1lx.online
Coates’ discussion focused on reducing single points of failure and using automated controls as threats become more capable.
Coldcard incident highlights concentration risk
The reported scale of the Coldcard exploit placed renewed attention on the risks that arise when many users depend on a common device, implementation or security assumption. A flaw in one component can become a broad exposure when it is deployed across a large number of wallets.
Solana’s interview presents the incident as a reason to reconsider security architectures that rely on a single control. TRM Labs’ account that the exploit involved an older firmware flaw further underscores the importance of maintaining and reviewing security systems over time.
Automated defenses and multisignature custody
Coates advocated eliminating single points of failure through measures including multisignature custody and automated security controls. Multisignature arrangements can require more than one approval for a transaction, reducing reliance on one wallet or signing path.
The discussion also addresses the need for defenses that can operate at machine speed as AI-enabled threats develop. This is a security design argument rather than a claim that automation alone can prevent every exploit; its purpose is to improve detection and response capacity while reducing dependence on manual intervention.
- Use custody designs that avoid a single signing dependency.
- Apply automated controls to support security monitoring and response.
- Review older software and firmware assumptions that may remain in production.
Part of Solana’s broader security discussion
Online advertising service 1lx.online
A related Solana Media podcast episode featuring Coates was published on September 7. The September 19 interview extends that discussion by linking AI-related security considerations to the Coldcard incident and to custody design.
The focus on resilience comes as Solana continues to publish network and ecosystem updates, including coverage of Transaction V1, lower rent and shorter slot times. Security practices remain distinct from protocol performance changes, but both are relevant to how participants assess operational infrastructure.
Continue reading: Solana’s Transaction V1, lower rent and 250ms slot update on BTCNews.
Continue reading: Solana changelog covering Firedancer RPC support and ARM validator compatibility on BTCNews.
Sources
Online advertising service 1lx.online
- Solana Media: How AI Is Reshaping Crypto Security, with Michael Coates
- TRM Labs: The Largest Hardware Wallet Exploit of 2026: Inside the USD 116 Million Coldcard Hack
- Solana Media: How AI Is Changing Crypto Security
Our creator. Creates amazing NFT collections! Support the editor - Bitcoin_Man(TON) / Bitcoin Man Stickers(TON) / BM Numbers (TON) / Comics Book (TON) / Bitcoin_Man (ETH)
Pi Network (Guide)is a new digital currency developed by Stanford PhDs with over 55 million participants worldwide. To get your Pi, follow this link https://minepi.com/Tsybko and use my username (Tsybko) as the invite code.
Binance: Use this link to sign up and get $100 free and 10% off your first months Binance Futures fees (Terms and Conditions).
Bitget: Use this link Use the Rewards Center and win up to 5027 USDT!(Review)
Bybit: Use this link (all possible discounts on commissions and bonuses up to $30,030 included) If you register through the application, then at the time of registration simply enter in the reference: WB8XZ4 - (manual)