Galaxy updates on Coldcard exploit: 1,778 BTC stolen; 33 attacker address clusters flagged
AI Market Summary
Galaxy Research estimates Coldcard-related attacks have stolen at least 1,778 BTC (~$112m), with 1,531 BTC still held in attacker-controlled addresses and meaningful laundering via CoinJoin plus some flow to exchanges/bridges. While no new high-confidence attack waves have appeared since Aug 6, the scale and ongoing custody of funds heighten near-term security and compliance risk for Bitcoin-linked venues and can increase monitoring-driven friction in exchange flows.
Impact level
● Medium
Affected assets
BTC/USDT-1.77%
AI Insight · BTC/USDTAI Insight
▼ Bearish
Trade now
⚠️ AI-generated insights are based on news content and are provided for informational purposes only. They do not constitute investment advice or represent the views of BingX. Investing involves risk. Please trade responsibly.
Galaxy Research said exploits tied to a Coldcard vulnerability have led to the theft of at least 1,778 BTC, worth about $112 million, and warned total losses could ultimately be higher. The team has identified three major waves of activity along with more than 30 smaller attack traces, and has mapped at least 33 clusters of attacker-controlled addresses. Galaxy noted it has not observed any new high-confidence attack waves since Aug. 6.
Galaxy estimates roughly 1,531 BTC remains in wallets controlled by the attackers. About 246 BTC has been moved, with around 65% funneled through CoinJoin and roughly 35% sent to exchanges or cross-chain bridges. Galaxy said it has shared the related address list with crypto exchanges, compliance and investigative firms, and law enforcement.
