Coldcard hacker transfers $7.7 million, nearing half of stolen Bitcoin haul

In a new development, the hacker responsible for the Coldcard breach has begun moving significant amounts of stolen Bitcoin, with a recent transfer totaling $7.7 million. This transfer represents nearly half of the total stolen Bitcoin from the third wave of the attack. The attacker has reportedly created 293 separate vaults to store the stolen assets and is systematically emptying them, starting with the largest vaults first. This methodical approach suggests a strategic plan to gradually liquidate the stolen funds while minimizing detection risks.
The Coldcard hack has raised considerable concerns within the crypto community, as it highlights vulnerabilities in hardware wallets that were previously thought to be secure. Coldcard, known for its robust security features, has come under scrutiny following this incident. The breach, which has been characterized as one of the more significant attacks in recent months, has led to discussions about the overall safety of using hardware wallets. The hacker’s ability to siphon off such a large amount of Bitcoin has prompted increased vigilance among users of similar products.
This recent activity by the hacker is significant for the market, as it could lead to increased selling pressure on Bitcoin. If the stolen funds are moved to exchanges and sold, it could impact market prices negatively. Traders and investors are closely watching these movements, as they can signal larger trends or shifts in market sentiment. The market's reaction to such news often leads to heightened volatility, as participants adjust their strategies in response to perceived risks.
Industry experts have reacted to the incident with a mix of concern and caution. Some have pointed out the importance of improving security protocols not just for hardware wallets but across the board in the cryptocurrency ecosystem. Others have emphasized the need for better tracking and monitoring of suspicious activities related to stolen assets. As the situation unfolds, it has become clear that the repercussions of this breach may extend beyond just Coldcard, affecting the broader trust in hardware wallet solutions.
Looking ahead, the community will likely continue to monitor the hacker's movements closely. As they progress in transferring and potentially selling the stolen Bitcoin, exchanges and law enforcement may ramp up efforts to trace these transactions. The outcome of these actions may influence the future security measures adopted by wallet providers and the overall perception of hardware wallet safety in the cryptocurrency landscape.
CoinMagnetic Team
Crypto investors since 2017. We trade with our own money and test every exchange ourselves.
Updated: September 2026
From our insights:
Related news

USDT faces $91 billion risk from two-key breach vulnerability, report warns

Blockstream and hackers communicate as $320M in bitcoin withdrawn from Liquid

Coldcard exploiter moves 45% of funds stolen from ‘Wave 3’ attacks, Galaxy says

Major breach sees 4000 BTC taken from Liquid as ETFs record strong inflows

Liquid Network halts operations after $320 million bitcoin withdrawal by hackers
