Digital Wallet
By Sakamoto Nashi
1 / 15
A Suspected Fourth Wave Could Push Losses to $130M. Galaxy is fairly confident a fourth wave exists. If confirmed, it would add another 459 BTC to the…
2 / 15
Galaxy Coordinates With Law Enforcement and Exchanges. Galaxy Research has been sharing compromised address data with US federal law enforcement, crypto…
3 / 15
Bitcoin theft tied to Coldcard hardware wallets has crossed $100 million. Galaxy Research put the confirmed total at 1,596 BTC stolen from roughly 7,300 addresses, spread across…
4 / 15
The numbers keep climbing. Galaxy's earlier estimate had tracked 1,367 BTC across 4,585 addresses — already a staggering figure.
5 / 15
73 confirmed victims. And possibly more coming.
6 / 15
Galaxy is fairly confident a fourth wave exists. If confirmed, it would add another 459 BTC to the pile, bringing the grand total to 2,055 BTC — worth around $130 million at…
7 / 15
So the official figure stays at 1,596 BTC for now. But $130 million isn't far off if the fourth wave checks out.
8 / 15
What's strange — and honestly a little unsettling — is that 90% of the stolen Bitcoin hasn't moved. It's just sitting there. For investigators, that cuts both ways.
9 / 15
See also: ZachXBT Walks Away From $88.6M Coldcard Hack as Bitcoin Community Takes Heat
10 / 15
Galaxy Research has been sharing compromised address data with US federal law enforcement, crypto exchanges, and cyber-investigation firms.
11 / 15
The firm has also been working directly with victims to gather more granular details. That victim outreach has been crucial.
12 / 15
Galaxy's warning to Coldcard users is blunt: move your Bitcoin now. The attacks are still ongoing, per the research team's own words.
13 / 15
Related: Coldcard Firmware Flaw Drains 1,367 Bitcoin Across 4,585 Wallets
14 / 15
For the broader crypto security world, the Coldcard situation is a reminder that cold storage isn't automatically safe.
15 / 15
Galaxy Digital's research arm continues to monitor the situation. The fourth wave, if it clears verification, would make this one of the largest hardware wallet thefts on record.
The Currency Analytics
Want the full story?