Coldcard Exploit Unfolds with 15+ Attackers and $114M Losses

A series of attacks on Coldcard wallets has led to significant losses for users. According to Galaxy Research, more than 15 distinct attackers have been identified in connection with these incidents.

One notable example is a wallet inactive since 2013 that moved 500 BTC (approximately $31.3 million) on August 3. This transaction was detected by Whale Alert and highlights the growing trend of dormant Bitcoin holders moving their coins.

The Coldcard exploit, which has accumulated losses of up to $114 million, is linked to a vulnerability in its firmware from 2021. Galaxy Research identified 1,596 BTC stolen across three confirmed attack waves, with an unconfirmed fourth wave also suspected.