Coldcard Hack Stolen Funds Surge to 1367 BTC, 4585 Addresses Compromised

Stolen BTC reaches $88.6M across 4585 addresses. Attack ongoing with automated patterns detected. Users urged to migrate funds immediately from affected Coldcard addresses.

Woofun AI reports that stolen funds from the Coldcard attack have risen to 1367.05 BTC, valued at approximately $88.6 million, affecting 4585 addresses. Galaxy Research Director Alex Thorn confirmed the attack remains active, urging users to immediately transfer assets from Coldcard-generated addresses and report incidents to law enforcement.

Thorn noted that three prior large-scale attacks exhibited automated transaction patterns, with stolen BTC remaining in attacker addresses.

However, newer opportunistic actors are laundering funds within hours via cross-chain services like ThorChain to overseas gambling platforms. All single-signer addresses created after the March 2021 firmware upgrade face theft risk. The stolen funds had an average dormancy of 3.18 years, primarily impacting long-term holders.