COLDCARD Users Lose $114M in BTC Across 5,200 Addresses

Key Point

Onchain Lens monitoring shows COLDCARD users had about 1,816 BTC stolen, worth around $114 million, across more than 5,200 affected addresses. The confirmed first to third waves involve 1,367.05 BTC worth about $88.6 million. The fourth wave matches the pattern and involves 462 potential victims with 388.93 BTC. Onchain Lens is identifying associated clusters from on-chain data, and the attacker has not yet moved the stolen funds. The cluster remains active, with the latest transaction recorded just minutes ago.

Why it matters: Large wallet-related thefts can pressure confidence in self-custody tools and may trigger defensive movement of funds.

Market Sentiment

Bearish, Risk-off, Event-driven, Fear.

Reason: A $114 million BTC theft from COLDCARD users can raise security concerns and reduce risk appetite.

Similar Past Cases

In 2023, Atomic Wallet users lost more than $35 million in a wallet hack. (Fortune) Difference: The COLDCARD incident centers on BTC and affected addresses, while the Atomic Wallet case involved a different wallet provider and multiple assets.

Ripple Effect

A wallet-related theft can spread through confidence and operational channels if users move funds away from similar self-custody setups. If the stolen BTC begins moving, then exchanges and analytics teams may treat the path as a live laundering risk. If the active cluster stops adding related transactions, then containment risk may look lower.

Opportunities & Risks

Opportunities: If Onchain Lens identifies associated clusters and the funds remain unmoved, then waiting for cleaner attribution can reduce false-alarm selling and support disciplined BTC exposure.

Risks: If the attacker moves stolen BTC, then reducing exposure here limits downside from forced de-risking and exchange alert risk.