Coldcard Bitcoin theft tops $100M across 3 confirmed attack waves: Galaxy

Galaxy Research said 90% of the stolen Bitcoin remains unmoved as investigators examine a suspected fourth wave that could lift losses to $130 million.

Confirmed losses from the Coldcard wallet incident have exceeded $100 million, with 1,596 Bitcoin (BTC) stolen from about 7,300 addresses across three separate major attack waves and 14 smaller incidents, according to a new update from Galaxy Research. 

On Monday, Galaxy Digital’s research arm said 73 victims had contacted its researchers, and victim reports confirmed the first three major attacks, helping investigators identify smaller “footprints” that Galaxy said could represent opportunistic attackers exploiting the vulnerability.

Galaxy Research also identified a suspected fourth wave that could bring total losses to 2,055 BTC, worth about $130 million. However, Galaxy said it excluded the event from its confirmed estimate because it had not yet received confirmation from victims believed to be part of that wave. The research group said with “medium-high” confidence that the wave largely represented attacker activity.

Read more