Coldcard User Thefts Reach Estimated 1,816 BTC, Onchain Lens Says

Key Point

Onchain Lens said thefts targeting users of Coldcard hardware wallets are continuing. The analytics firm estimated total losses at 1,816 BTC, or $114 million. Onchain Lens said a fourth attack matching the first three affected another 462 users and stole 388.93 BTC. The hacker has not yet moved the stolen funds to other addresses, according to Onchain Lens. Galaxy Research had earlier estimated total losses could rise to as much as 2,055 BTC.

Why it matters: Large self-custody losses may reduce user confidence if the attack pattern appears repeatable.

Market Sentiment

Bearish, Stress-on, Event-driven.

Reason: Onchain Lens estimated Coldcard user thefts at 1,816 BTC, which may weaken confidence in self-custody security.

Similar Past Cases

In December 2023, Ledger said its Connect Kit exploit used malicious code that affected DApps and was neutralized after a brief drain window; TechCrunch reported ZachXBT identified more than $600,000 in stolen crypto, and Ledger said the hardware wallet was not believed to be affected. (TechCrunch). The difference is that the current Coldcard case involves a much larger Bitcoin loss estimate and continuing transfers.

Ripple Effect

Self-custody security concerns could spread through a confidence channel if users treat hardware-wallet setup risk as broader than one incident. If stolen funds begin moving through exchanges or mixers, then market attention may shift from loss estimation to recovery probability and venue controls.

Opportunities & Risks

Opportunities: If Onchain Lens or Coldcard identifies a shared attack vector, then confirmed mitigation can become a safer entry signal for wallet-related exposure.

Risks: If stolen funds start moving to new addresses, then reducing event-risk exposure may limit downside from recovery uncertainty.