Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC Coldcard users wary of new round of coordinated theft attacks
Coldcard users are being warned to be wary of a new round of coordinated theft attacks targeting their Bitcoin hardware wallets. The attack occurred within days of the first round of attacks last Thursday.
Galaxy Research Lead Alex Thorn noted in a platform X post posted on Monday that 218 transactions involving 462 potential victim addresses have occurred in the past few hours and approximately 388.9 bitcoins (BTC) have been transferred.
Thorn said that these activities performed an average of 13.8 coin sweeps per block, which is approximately 45 times the frequency observed compared to the window period before the event occurred. Most transfers create a new receiving address for each victim, rather than aggregating them into a centralized collection wallet.
He added that some funds had been transferred to second-hop addresses.
"These are likely Coldcard victims-they match the characteristics of the Coldcard vulnerability UTXO, and the abnormal transaction pattern makes me highly convinced that this is a new round of attacks." Thorn said.
Researchers said there are still similar transactions in the memory pool waiting to be confirmed. Affected users with the relevant key may be able to transfer funds to secure wallets by broadcasting a conflicting transaction with a higher fee before the attacker's transaction is confirmed.
Previously, a previously undiscovered vulnerability in Coldcard firmware was disclosed, resulting in lower-than-expected entropy of seed wallets generated by affected devices. The latest estimates show that more than 1100 wallets have been affected, and a total of US$90 million worth of Bitcoin has been stolen.
