Coldcard Exploit Drains $30M in 10 Minutes, Attacker Targets High-Value Wallets First

Chainalysis data reveals a Coldcard vulnerability led to $38M+ theft, with $30M stolen in the first 10 minutes as attackers prioritized high-balance wallets using pre-profiled data.

Woofun AI reports that Chainalysis analysis of the Coldcard exploit indicates over $38 million was stolen, with approximately $30 million extracted within the first 10 minutes. The attacker systematically targeted the highest-value wallets first, including one holding $1.8 million, suggesting victims were profiled prior to the asset transfers. Around 500 wallets were drained within 25 minutes. Block's Clay Garrett confirmed investigators found the attacker used a paid account with a major blockchain service provider to query victim addresses during the operation. Internal logs from the provider matched the request timestamps and sequence, though Block stated no evidence suggests the company knowingly assisted in the theft. Relevant information has been shared with authorities.