Coldcard Hacker Moves $7.7M, Nearly Half of Third-Wave Bitcoin Haul

What happened

The hacker who stole Bitcoin from Coldcard users has moved $7.7 million, which is nearly half of the total haul from the third wave of attacks. The attacker created 293 separate vaults and is emptying them starting with the largest ones.

Confirmed

Global impact / market context

This movement of stolen Bitcoin could pressure prices if the hacker sells, affecting investors who hold the asset. It also highlights security risks in hardware wallets, which may reduce trust and hurt sales for companies like Coldcard.

Analyst inference

Bitcoin's price can be sensitive to large sell orders, and this theft adds uncertainty. The incident may also influence how investors choose storage methods, potentially shifting demand toward more secure options or regulated custodians.

Analyst inference

What to watch

1. The attacker is emptying 293 vaults in order of size, so watch for further large transfers as the largest vaults are drained first. Confirmed
2. Investors should monitor Bitcoin exchange inflows for spikes, which could signal that the stolen coins are being sold, potentially affecting market prices. Proposed
3. Coldcard may face reputational damage, so watch for any official statements or security updates that could influence user confidence and future sales. Analyst inference

Affected assets

• BTC — Bitcoin

Evidence

• decrypt.co