Coldcard attacker holds 1,159 BTC as mixing starts

Most of the Bitcoin stolen through the COLDCARD wallet flaw remains unmoved, but on-chain investigators have detected a separate attacker beginning to route smaller amounts through a mixer. Summary The largest known COLDCARD attacker controls 1,159 BTC across seven addresses. None of the 1,159 BTC has entered mixers or been transferred to an identifiable cash-out service. A separate attacker sent 64 BTC toward a mixer, initially mixing about 10 BTC. Investigators have distributed roughly 600 flagged addresses to law enforcement, exchanges, and analytics firms. COLDCARD attacker leaves 1,159 BTC untouched Galaxy Research said the largest known theft connected to the COLDCARD vulnerability involved 1,159 BTC. The funds remain spread across seven addresses associated with the attacker and have not moved since the initial sweep. COLDCARD ATTACKER MOVES FUNDS 👺The Coldcard RNG exploit cluster received 1,159.42 BTC (~$72.71M) from 870 exploited addresses.The attacker moved 0.06 BTC (~$3.78K) to a new address, while 1,159.35 BTC (~$72.70M) remains across the 8 original attacker addresses.Fresh… pic.twitter.com/mPGHa9Vnat— Onchain Lens (@OnchainLens) August 1, 2026 The Bitcoin was stolen w...