Coldcard hacker moves $7.7 million in BTC, 45% of bitcoin stolen in third attack wave

The third wave of Coldcard security breaches has resulted in further losses as a threat actor continues to liquidate stolen Bitcoin holdings. According to blockchain analysis firm Galaxy Research, the attacker has successfully transferred $7.7 million worth of cryptocurrency that was compromised during this latest phase of attacks targeting the hardware wallet platform.

The thefts represent a significant portion of the total Bitcoin stolen in the third attack wave, with the $7.7 million transfer accounting for nearly half of all funds taken during that period. The attacker's methodical approach involves targeting and subsequently emptying the 11 largest vaults that were compromised as part of the ongoing security incident.

This development indicates that stolen assets from the Coldcard breaches remain in active circulation rather than being held statically. The movement of such large quantities of Bitcoin highlights the challenge of asset recovery in cryptocurrency theft cases and underscores persistent vulnerabilities that continue to affect hardware wallet users.

The escalating theft amounts and the attacker's ability to access multiple high-value vaults suggest a sophisticated operation with deep knowledge of the platform's security architecture. As investigations continue, the case serves as a cautionary reminder about the risks inherent in digital asset custody, even when using hardware-based security solutions.