Bitcoin · Decrypt
Among Galaxy's confirmed waves and footprints, none shows activity after August 6
Compiled by KHAO Editorial — aggregated from 2 sources. See llms.txt for citation guidance.
✓ KHAO Verified
That doesn't mean the method stopped working.
Key facts
- Footprint E, the biggest single owner-confirmed cluster, took 209.94 BTC (roughly $13.3M) across 2,148 addresses; Wave 3 took 208.24 BTC (near $13.0M) from 1,912
- Galaxy still carries a candidate fourth wave—638.5 BTC it hasn't confirmed—that would lift the toll to 2,417 BTC, above $151.3 million by today’s prices
- As of block 962,304 (data Aug. 13), 1,499.27 BTC (nearly $93.9M) sat unspent in attackers’ hands
- Galaxy's breakdown puts the largest proven wave—Wave 1—at 1,082.65 BTC pulled from 1,195 addresses in the opening minutes
Summary
Galaxy Research now puts the Coldcard exploit's confirmed haul above 1,778 BTC (about $112 million), with a suspected fourth wave that would lift it to 2,417 BTC. No confirmed attacker activity has appeared after August 6, across three major waves and more than 30 smaller footprints. Galaxy has spoken to 190-plus victims directly and still tells single-signature Coldcard holders to move funds to fresh addresses. Stolen Bitcoin losses from the massive Coldcard wallet exploit have begun to slow, but the total amount of BTC swiped continues to climb—and the worst may not be over yet. That’s the latest from Galaxy Research, the crypto research firm that’s been tracking the exploit from the start.