Coldcard exploit now hits 4,585 wallets – Attacker still holds $88.6M stolen BTC

What happened

Investigators have linked an additional 4,585 Bitcoin wallets to the suspected Coldcard hardware‑wallet exploit, confirming that the attacker continues to control the stolen BTC from the original breach.

Confirmed

Global impact / market context

The growth of the Coldcard exploit shows that even reputable hardware wallets can be vulnerable, which may cause users to rethink how they store Bitcoin and could increase demand for more robust security solutions.

Analyst inference

As the exploit expands, confidence in Bitcoin’s overall security may be shaken, potentially prompting investors to seek alternative assets or custodial services that promise stronger protection against similar attacks.

Analyst inference

What to watch

1. Continued forensic work to discover whether more wallets beyond the 4,585 identified are tied to the Coldcard breach, indicating the full extent of the attacker’s holdings. Proposed
2. Tracking movements of the stolen BTC on the blockchain to see if the attacker begins liquidating or transferring the funds to exchanges or mixers. Proposed
3. Responses from Coldcard and other hardware‑wallet makers, such as firmware patches or security advisories, that could limit further exploitation of the vulnerability. Proposed

Affected assets

• BTC — Bitcoin

Evidence

• ambcrypto.com