Skip to content
Back to Guavy Wire
Crypto

Coldcard Thief Moves Nearly Half of Stolen Bitcoin

Instruments
BTC ETH RUNE
Share

The attacker behind the recent Coldcard Bitcoin wallet thefts has moved nearly half of the stolen funds, according to research firm Galaxy. The exploiter has spent 97.09 BTC worth $7.8 million at Monday's prices since the heist began on July 30.

Galaxy tracked the activity and found that the attacker used CoinJoin transactions on Sunday to move the funds. This comes after an earlier incident on September 2, where the exploiter swapped stolen Bitcoin for Ethereum through THORChain.

The research firm noted that the operator continues to move the stolen coins from larger vaults to smaller ones. In total, 30.81 BTC remains in the top 10 untouched vaults, while another 33.77 BTC is scattered across smaller vaults ranked 61-293.

More on Crypto

Disclaimer: Guavy is a data and market intelligence provider, not an investment adviser. The information, signals, and market analysis provided by the Guavy API and related services are for informational purposes only and are not intended as financial advice, investment recommendations, or an endorsement of any particular trading strategy. Trading in volatile markets, including cryptocurrency, carries significant risk and may not be suitable for all investors. Past performance is not indicative of future results. Users should consult with a qualified financial professional before making any investment decisions. Guavy makes no guarantee of trading profits or financial returns.

Market sentiment intelligence for apps, funds & agents

Location

729 55 Ave SW
Calgary AB T2V 0G4
Canada

© 2026 Guavy Inc