Crypto
Coldcard Hackers Launder $7.8M in Stolen BTC Through THORChain and CoinJoin
A critical flaw in Coldcard hardware wallets has been exploited by hackers to steal approximately 1,789 BTC, worth around $114.7 million at the time of the thefts, starting July 30, 2026.
The root cause was a March 2021 Coinkite firmware bug that weakened wallet seed randomness, allowing offline brute-force attacks on private keys.
At least 15 different attackers took part across multiple waves between July 30 and August 6, with the first wave alone extracting 1,082.65 BTC in just 41 minutes.
The Wave 3 hacker has laundered about 97.09 BTC (roughly $7.8 million) through THORChain and CoinJoin over five days, or about 45% of that wave’s stolen funds.