Coldcard Wallet Heists Top $100M Amid Ongoing Attacks
Confirmed losses from a series of attacks on Coldcard wallets have exceeded $100 million. According to Galaxy Research, 1,596 BTC were stolen from about 7,300 addresses across three major attack waves and 14 smaller incidents.
The first three major attacks were confirmed by victim reports, which helped investigators identify smaller 'footprints' that could represent opportunistic attackers exploiting the vulnerability.
Galaxy Research also identified a suspected fourth wave that could bring total losses to 2,055 BTC, worth about $130 million. However, they excluded this event from their confirmed estimate because it had not yet received confirmation from victims believed to be part of that wave.
Galaxy said 90% of the stolen Bitcoin had not been moved, including funds attributed to the first three confirmed incidents. Attacker and victim addresses have been shared with US federal law enforcement, crypto exchanges, and cyber-investigation companies.