Coldcard Wallet Heists Top $100M as Attackers Exploit Vulnerability
Confirmed losses from the Coldcard wallet incident have surpassed $100 million. According to Galaxy Research, about 1,596 BTC were stolen from approximately 7,300 addresses across three major attack waves and 14 smaller incidents.
The first three major attacks were confirmed by victim reports, helping investigators identify smaller 'footprints' that could represent opportunistic attackers exploiting the vulnerability.
Galaxy Research also identified a suspected fourth wave, which could bring total losses to around $130 million. However, they excluded it from their confirmed estimate due to lack of confirmation from victims believed to be part of that wave.
About 90% of the stolen BTC have not been moved, including funds attributed to the first three confirmed incidents. Attacker and victim addresses have been shared with US federal law enforcement, crypto exchanges, and cyber-investigation companies.