Dormant Bitcoin Moves Surge 75% in August, Outpacing July Totals Amid Security Fears

Woofun AI reports that dormant Bitcoin activity accelerated sharply in August, with 2,209.05 BTC moving from long-inactive addresses during the first 10 days of the month. This volume already surpasses July's full-month total of 1,264.16 BTC, according to data tracked by Btcparser.com, signaling a significant shift in long-term holder behavior.

The quantitative disparity between the two months is stark. July averaged approximately 40.78 BTC in tracked dormant transfers per day, whereas August has reached a daily average of 220.91 BTC. Transaction frequency also surged, with 85 dormant spends recorded through August 10 compared to only 30 during the entirety of July. This acceleration indicates a concentrated burst of activity rather than a gradual trend.

Woofun AI data shows that structurally, the movement is driven by specific wallet clusters rather than broad market participation. Addresses created in 2014 accounted for 35 spends totaling 854.42 BTC, while 21 transactions linked to 2016 addresses moved another 224.18 BTC.

Notably, 19 of those 2016 transfers involved exactly 10 BTC each, suggesting automated or batched operations. Even after removing a suspected 2014 cluster and a separate group associated with October 2016, 1,215.15 BTC remains across 33 other August spends. This residual volume still represents roughly three times July's daily rate. The age profile has also shifted; during July, addresses created in 2016 and 2017 represented roughly 71% of tracked volume, but in August, addresses from 2013 and 2014 account for about 71%. One of the largest movements occurred on August 3, when 897.14 BTC changed hands across eight tracked spends.

The timing has drawn attention because dormant Bitcoin activity accelerated shortly after the Coldcard security incident reported in early August. The incident involved a vulnerability affecting seed generation, and reports said attackers drained significant amounts from affected wallets.

However, there is no evidence establishing that the dormant Bitcoin tracked by Btcparser.com came from compromised Coldcard devices. The older addresses in this dataset were created years before the affected firmware period, making a direct connection unlikely.

A more plausible explanation is that some long-term holders are reviewing old storage arrangements, consolidating addresses or moving funds into newer wallets after renewed attention on self-custody security. This pattern suggests proactive risk management rather than reactive loss mitigation. As holders reassess their digital asset infrastructure, such consolidation waves may become more frequent.