Coldcard Hack Update: $75M in Stolen Bitcoin Hasn't Moved. Here's Why That Matters.

More than a week after one of Bitcoin's biggest hardware wallet breaches, the most surprising development isn't the size of the theft it's the silence that followed. Despite over $100 million being stolen from vulnerable Coldcard wallets, the attackers still haven't moved most of the funds.
Researchers estimate that 5,200+ wallets have been breached, with total losses ranging between $116 million and $130 million. Yet, nearly $75 million remains parked across seven known attacker wallets, all under consistent scrutiny from blockchain investigators.
One of those wallets alone currently holds 562.02 BTC, worth roughly $36.3 million.
Ironically, the wallet hasn't made any meaningful outgoing transactions. Its dollar value has increased over the past week but only because Bitcoin's price has risen, not because the hacker has moved or sold the coins.
Instead of seeing laundering activity, the address has become something unexpected.
Using Bitcoin's OP_RETURN feature, people have started sending small transactions containing messages directly to the hacker's wallet. Some victims are requesting for their money back, others are offering laundering services, while many are simply taking advantage of the wallet's newfound attention. The balance, however, remains unchanged.
The lack of movement is significant. Every transfer on Bitcoin is public, and these wallets are being monitored by exchanges, blockchain analytics firms, and security researchers. The first outbound transaction whenever it happens could reveal how the attackers intend to launder the funds and may provide investigators with their strongest lead yet.
For now, the stolen Bitcoin remains visible, traceable, and untouched.
What to watch next:
Will the 562 BTC wallet finally move?
Will the funds be split into smaller wallets?
Can exchanges intercept any future deposits?
Or will the attackers continue waiting for the attention to fade?
Sources: Galaxy Research, Elliptic, Arkham Intelligence, CoinDesk, The Hacker News, TechCrunch, BleepingComputer, Fortune
India Crypto Research operates independently. The information presented herein is intended solely for educational and informational purposes and should not be construed as financial advice. Before making any financial decisions, it's essential to undertake your own thorough research and analysis. If you're uncertain about any financial matters, we strongly recommend seeking guidance from an impartial financial advisor.