More than 380 BTC vanished in a fresh wave of attacks exploiting Coldcard hardware wallets, adding to the previous 1,367 BTC stolen through this vulnerability. The latest surge involved 218 transactions moving funds from 462 suspected victim addresses, dramatically increasing the pace of theft.
Fourth Wave Intensifies Bitcoin Losses
Galaxy Research’s Alex Thorn tracked 218 suspicious transactions between Bitcoin blocks 960,778 and 960,792. These moved roughly 380 BTC from compromised Coldcard wallets to new destinations at a rate nearly 45 times faster than before the exploit emerged. The pattern matched prior incidents targeting Coldcard’s flawed random number generator (RNG), confirming these as likely new victims. Some stolen coins have already been shuffled to secondary wallets, complicating tracking efforts.
Coldcard Response and Fallout
Coldcard stopped shipping affected devices and destroyed remaining units with vulnerable firmware, aiming to halt further losses. However, the firmware patch only protects newly generated seeds, forcing users to create fresh wallets and transfer funds to stay safe. Victims are encouraged to retain compromised devices as legal investigations continue. So far, confirmed thefts total approximately 1,367 BTC, valued at $88.6 million, with individual losses reaching millions, including a Canadian user who lost $1.6 million within minutes.
This material is for informational purposes and does not constitute financial advice.
