Coldcard theft: FBI may know 1,082 BTC attacker

Investigators may have given U.S. authorities information capable of identifying an attacker responsible for the first Coldcard theft wave, Bitcoin Magazine reported on Aug. 18. Summary Block traced the first Coldcard sweep to a paid blockchain data account used during theft. Galaxy said the first wave removed 1,082.65 BTC, with the associated funds remaining unmoved afterward. No FBI statement confirms an attacker’s identity, arrest, charges, seizure, or recovery of stolen funds. At least 1,700 BTC was stolen across multiple waves, according to Galaxy’s latest public estimate. Existing vulnerable seeds remain unsafe after firmware updates and require migration into newly generated wallets. Galaxy Research’s Alex Thorn said the first wave attacker’s identity “may be known to law enforcement.” His statement was cautious, and the FBI has not publicly confirmed identifying a suspect, opening a case, making an arrest or recovering any stolen Bitcoin. The first wave removed 1,082.65 BTC from wallets generated using vulnerable Coldcard firmware. At Bitcoin’s recent price near $64,000, those coins would be worth approximately $69 million, not $11.8 million. Block found an offchain trail f...