Coldcard Wallet Heist Tops $100M as Thieves Strike Again

Confirmed losses from the Coldcard wallet incident have topped $100 million, with 1,596 BTC stolen across three major attack waves and 14 smaller incidents. According to a new update from Galaxy Research, this amount exceeds the initial estimate of 1,367 BTC traced across 4,585 addresses published on Saturday. The first three major attacks were confirmed through victim reports, helping investigators identify smaller 'footprints' that may represent opportunistic attackers exploiting the vulnerability.

Galaxy Research also identified a suspected fourth wave, which could bring total losses to 2,055 BTC worth around $130 million. However, they excluded this event from their confirmed estimate due to the lack of confirmation from victims believed to be part of that wave. The research group has shared attacker and victim addresses with US federal law enforcement, crypto exchanges, and cyber-investigation companies.

About 90% of the stolen BTC remains untouched, including funds attributed to the first three confirmed incidents. Galaxy warned that attacks are ongoing and urged uncertain Coldcard users to migrate their funds to a safe address immediately.