Coldcard Wallet Heist Tops $100M Across Three Major Attack Waves

The Coldcard wallet incident has resulted in over $100 million in losses, according to an update from Galaxy Research. Three major attack waves and 14 smaller incidents have seen a total of 1,596 Bitcoin stolen from approximately 7,300 addresses. The research group identified smaller 'footprints' that may represent opportunistic attackers exploiting the vulnerability.

Galaxy Research also suspects a fourth wave that could increase total losses to $130 million, but has not yet confirmed it with victims. The majority of the stolen Bitcoin remains unmoved, and attacker and victim addresses have been shared with law enforcement, crypto exchanges, and cyber-investigation companies.

The company warns that attacks are ongoing and urges uncertain Coldcard users to transfer their funds to a secure address immediately. Galaxy's estimate has increased from 1,367 Bitcoin traced across 4,585 addresses to over $100 million in losses.