Table of Contents

Coldcard Hack Update: $75M in Stolen Bitcoin Hasn't Moved. Here's Why That Matters.

intermediate

Coldcard Hack Update: $75M in Stolen Bitcoin Hasn't Moved. Here's Why That Matters.

By India Crypto Research|1 mins read

Last Updated on: Aug 24, 2026|Published On: Aug 11, 2026

intermediate

Key Takeaways

More than $75 million in stolen Bitcoin remains untouched. Despite the Coldcard hack draining over $100 million from vulnerable wallets, most of the stolen funds have not moved from the known attacker addresses.
One wallet holds 562.02 BTC, worth around $36.3 million. The address has seen no meaningful outgoing activity, with its dollar value rising only because Bitcoin’s price increased.
The stolen Bitcoin is being closely monitored. Blockchain investigators, exchanges and security firms can track these wallets publicly, making it much harder for the attackers to move or cash out the funds unnoticed.
The first movement could be the biggest clue yet. If the attackers begin splitting or transferring the Bitcoin, investigators may get insights into their laundering strategy and potentially identify the services or exchanges they are trying to use.
Bitcoin’s transparency is playing an important role. Unlike stolen cash, the funds remain visible on the blockchain and can be followed from wallet to wallet.
For now, the attackers appear to be waiting. The stolen Bitcoin remains traceable, highly visible and largely unmoved, making the next transaction one of the most important developments to watch.

Part of a series

Coldcard Hack

Coldcard wallet losses near $114 million as a fourth sweep hits the mempool

1. What's new in wave four
2. How the losses stack up
3. What's driving the exploit
4. What should affected users do?

Coldcard Hack Update: Wave 3 Money Finally Moves, and It's Going Through THORChain

1. What actually happened
2. How Coldcard broke in the first place
3. From one attacker to a swarm
4. The three trails everyone's still watching

Coldcard Bitcoin Theft Tops $100M and the Stolen Funds Still Haven't Moved

1. Coldcard Bitcoin Theft Tops $100M and the Stolen Funds Still Haven't Moved
2. What Happened?
3. The Damage
4. Where the Money Is Now?
5. The Wallet Turned Graffiti Wall
6. What This Means for Self-Custody
7. Watch the Wallets

Current Article

Coldcard Hack Update: $75M in Stolen Bitcoin Hasn't Moved. Here's Why That Matters.

1. Coldcard Hack Update: $75M in Stolen Bitcoin Hasn't Moved. Here's Why That Matters.

How a Five-Year-Old Coldcard Bug Drained Over $115 Million in Bitcoin

1. What Went Wrong Inside the Wallet
2. Galaxy Research's Numbers, Verified and Growing
3. How the Thefts Were Actually Carried Out
4. What This Means for Bitcoin Self-Custody Holders

Coldcard Hack Update: No New Movement as of September 1

1. What the Three Tracked Positions Show Today
2. Why the Wasabi Transfer Still Matters Most
3. What This Means for the Broader Case
4. What to Watch Next

Coldcard Hack Update: $75M in Stolen Bitcoin Hasn't Moved. Here's Why That Matters.

More than a week after one of Bitcoin's biggest hardware wallet breaches, the most surprising development isn't the size of the theft it's the silence that followed. Despite over $100 million being stolen from vulnerable Coldcard wallets, the attackers still haven't moved most of the funds.

Researchers estimate that 5,200+ wallets have been breached, with total losses ranging between $116 million and $130 million. Yet, nearly $75 million remains parked across seven known attacker wallets, all under consistent scrutiny from blockchain investigators.

One of those wallets alone currently holds 562.02 BTC, worth roughly $36.3 million.

Ironically, the wallet hasn't made any meaningful outgoing transactions. Its dollar value has increased over the past week but only because Bitcoin's price has risen, not because the hacker has moved or sold the coins.

Instead of seeing laundering activity, the address has become something unexpected.

Using Bitcoin's OP_RETURN feature, people have started sending small transactions containing messages directly to the hacker's wallet. Some victims are requesting for their money back, others are offering laundering services, while many are simply taking advantage of the wallet's newfound attention. The balance, however, remains unchanged.

The lack of movement is significant. Every transfer on Bitcoin is public, and these wallets are being monitored by exchanges, blockchain analytics firms, and security researchers. The first outbound transaction whenever it happens could reveal how the attackers intend to launder the funds and may provide investigators with their strongest lead yet.

For now, the stolen Bitcoin remains visible, traceable, and untouched.

What to watch next:

Will the 562 BTC wallet finally move?
Will the funds be split into smaller wallets?
Can exchanges intercept any future deposits?
Or will the attackers continue waiting for the attention to fade?

Sources: Galaxy Research, Elliptic, Arkham Intelligence, CoinDesk, The Hacker News, TechCrunch, BleepingComputer, Fortune

Disclaimer

India Crypto Research operates independently. The information presented herein is intended solely for educational and informational purposes and should not be construed as financial advice. Before making any financial decisions, it's essential to undertake your own thorough research and analysis. If you're uncertain about any financial matters, we strongly recommend seeking guidance from an impartial financial advisor.