Coldcard losses rise as fourth attack wave sweeps 448 BTC

Galaxy Research head Alex Thorn identified a suspected fourth coordinated Coldcard attack wave on Aug. 3, with his running estimate later rising to 448.7 Bitcoin moved from 709 potential victim addresses. Summary 448.7 BTC moved from 709 suspected victim addresses during a fourth coordinated Coldcard attack wave. Galaxy measured 13.8 sweeps per block, roughly 45 times its earlier control-window rate across blocks. Fixed firmware protects newly generated seeds, but existing vulnerable seeds still require complete wallet migration. Thorn described the addresses as “LIKELY Coldcard victims,” saying their unspent outputs and transaction behavior matched the vulnerable-wallet pattern. The wording matters. Galaxy’s findings come from blockchain analysis, not device records or a final law-enforcement attribution. Coinkite had not separately confirmed the fourth-wave total in its latest public advisory. Coldcard attack activity rose 45 times above baseline Thorn’s first snapshot covered blocks 960,778 through 960,792. It identified 218 transactions involving 462 possible victim addresses and about 388.9 BTC. His updated estimate later expanded the event to hundreds of transactions affectin...