News
Public · Published
Coldcard Exploiter Moves 45% of Wave 3 Loot as Stolen Bitcoin Enters CoinJoins
An attacker who stole Bitcoin from Coldcard users has moved 45% of the loot from the third wave of the attack. Overall, 82% of all stolen coins stay in the attacker's addresses, while 18% have been moved for laundering.
Published:
Updated:
What happened
An attacker who stole Bitcoin from Coldcard users has moved 45% of the loot from the third wave of the attack. Overall, 82% of all stolen coins stay in the attacker's addresses, while 18% have been moved for laundering.
Confirmed
Global impact / market context
This laundering activity may signal the attacker is trying to cash out, which could put selling pressure on Bitcoin's price. It also highlights security risks for hardware wallet users, potentially hurting trust in Coldcard and similar products.
Analyst inference
Bitcoin's price could react to large stolen coins moving, as traders watch for possible sales. Such events often raise concerns about exchange security and may prompt investors to review their own storage choices, affecting demand for hardware wallets.
Analyst inference
What to watch
- Watch whether the remaining 82% of stolen coins stay untouched in attacker-controlled addresses, as the article confirms they currently remain there. Confirmed
- Monitor if the laundered coins are sent to exchanges, as that could lead to selling. The article does not state this, but it is a reasonable next step to watch. Proposed
- Observe any public response from Coldcard or its parent company, such as security updates or user warnings, since this incident could affect their reputation and future sales. Analyst inference
Affected assets
- BTC — Bitcoin