Fourth Coldcard Attack Wave Moves 448.7 BTC

A fourth coordinated attack wave has hit Coldcard users, with an estimated 448.7 BTC moved from 709 potential victim addresses.

The attack was identified by Galaxy Research head Alex Thorn on August 3, who noted a significant increase in transactions involving suspected Coldcard victims.

Thorn's analysis showed that the attackers sent funds to fresh destinations rather than a shared collection wallet, making it harder to track the flow of money.

Coldcard users are still vulnerable despite Coinkite releasing fixed firmware, as existing seeds require complete migration to secure wallets. Thorn noted that unconfirmed transactions may offer a narrow escape for affected users who can broadcast a conflicting transaction with a higher fee and send funds to a secure wallet.