Coldcard Thefts Escalate: Onchain Lens Reports 1,816 BTC Lost in Ongoing Attack

Hardware wallet users are facing a growing security threat as Onchain Lens reports that thefts targeting Coldcard devices have escalated, with estimated losses now reaching 1,816 BTC, approximately $114 million. The blockchain analytics firm announced on X that a fourth attack, following the same pattern as three previous incidents, has affected an additional 462 users and resulted in the theft of 388.93 BTC.

Ongoing Attack Pattern and Fund Movements

According to Onchain Lens, the hacker has not yet moved the stolen funds to other addresses, a notable detail for investigators and affected users. However, new transfers from addresses linked to the attack were observed as recently as a few minutes before the firm’s latest update. This suggests the attacker may still be consolidating or preparing to launder the funds, which could complicate recovery efforts.

Earlier estimates from Galaxy Research projected that total losses from the Coldcard incident could rise to as much as 2,055 BTC. The current figures from Onchain Lens are approaching that upper bound, indicating that the attack is still active and may continue to expand.

Context and Implications for Hardware Wallet Users

Hardware wallets like Coldcard are widely considered among the most secure options for storing cryptocurrency, as they keep private keys offline. This incident, however, underscores that no solution is entirely immune to sophisticated attacks. While the exact method of compromise has not been fully disclosed, the recurrence of similar patterns suggests a targeted and technically advanced threat actor.

For the broader cryptocurrency community, this event serves as a critical reminder of the importance of operational security. Users are advised to review their transaction histories, ensure firmware is up to date, and consider additional security layers such as multi-signature setups or passphrase-protected wallets. Exchanges and wallet providers may also need to reassess their security protocols to prevent similar breaches.

Why This Matters to You

The scale of the thefts—over 1,800 BTC—represents a significant loss for individual users and could impact market sentiment. For those holding Bitcoin in hardware wallets, this news highlights the need for vigilance and proactive security measures. It also raises questions about the long-term resilience of hardware wallet technology against evolving attack vectors.

Conclusion

As the investigation continues, the cryptocurrency community watches closely to see whether the stolen funds will be moved or if the attacker will be identified. The incident serves as a stark reminder that security in the digital asset space requires constant adaptation. For now, affected users and the wider market must await further updates from Onchain Lens and other analytics firms tracking the situation.

FAQs

Q1: What is the current estimated loss from the Coldcard thefts?
Onchain Lens estimates that total losses have reached 1,816 BTC, approximately $114 million. This figure may rise as the attack continues, with earlier projections suggesting up to 2,055 BTC.

Q2: How many users have been affected by the fourth attack?
Onchain Lens reported that the fourth attack wave impacted 462 additional users, leading to the theft of 388.93 BTC.

Q3: Have the stolen funds been moved?
As of the latest update from Onchain Lens, the hacker has not moved the stolen funds to other addresses, but new transfers from linked addresses were still occurring.