Estimated Coldcard Hack Loss Reaches $130M as Dormant Bitcoin Wallet Moves $31.8M

Key Point

Galaxy Research said the Coldcard wallet drain could now stand at $130 million as it investigated a fourth attack wave. Hackers last week started taking over $35 million in Bitcoin from wallets after discovering a vulnerability in Coldcard wallet product software. A legacy Bitcoin address moved 500 BTC worth $31.8 million on Tuesday after 12 years of inactivity. Blockchain data shows the address moved all funds in one transaction and paid 191 sats, or $0.12, in fees. Coinkite said on Sunday that all Coldcard models were now vulnerable following more thefts.

Why it matters: A confirmed wallet security failure can pressure user confidence because holders may move coins or change custody setups quickly.

Market Sentiment

Cautiously Bearish, Stress-on, Event-driven.

Reason: The estimated Coldcard wallet drain could stand at $130 million, which may pressure confidence in self-custody security.

Similar Past Cases

In June 2023, Atomic Wallet users lost more than $35 million after a wallet compromise, and the incident showed how wallet-level security failures can trigger user losses without an exchange failure. (Fortune) (fortune.com) The mismatch is that the current situation centers on Coldcard and Bitcoin wallets, so holder behavior may reflect security migration more than broad wallet-sector contagion.

Ripple Effect

Security concern can transmit through custody behavior because holders may move coins from affected setups into new storage arrangements. If additional attack waves are confirmed, then the event could increase pressure on hardware wallet providers to publish remediation steps. If stolen-fund estimates stop rising, then the impact may remain contained to affected wallet users.

Opportunities & Risks

Opportunities: If Coinkite provides a concrete remediation path and stolen-fund estimates stabilize, then restored custody confidence is a potential signal that stress is contained.

Risks: If additional attack waves expand the estimate or more Coldcard models remain vulnerable, then reducing exposure to affected self-custody setups limits operational risk.