FBI Closes In on First-Wave Coldcard Hackers

The FBI may have identified the attackers behind the first wave of the July Coldcard hardware wallet exploit, which resulted in the theft of $11.8 million worth of BTC.

According to investigations by Block and Galaxy Research, the attackers used a paid blockchain data provider while moving the stolen funds. The provider's internal logs reportedly matched the attackers' activity patterns.

The exploit occurred in July 2026, resulting in the theft of 1,082.65 BTC. Investigators are still tracking other waves linked to the Coldcard exploit.