$30M Stolen in 10 Minutes from Vulnerable Coldcard Wallets

A recent attack on Coldcard hardware wallets has resulted in the theft of approximately $30 million within a 10-minute timeframe. The attacker prioritized the largest wallets, with three of the ten most affected holding at least 10 BTC worth around $636,000.

The stolen funds were concentrated among 500 distinct wallets over approximately 25 minutes, suggesting a deliberate effort to maximize early proceeds rather than processing wallets randomly.

Chainalysis reported that the attacker's pattern suggests they had examined the available wallet population before beginning the systematic sweep. The firm also noted that prioritizing larger balances reduced the risk of warnings or defensive transfers limiting the attacker's opportunities.