MarketPR

Coldcard Wave 3 exploiter moves 45% of stolen BTC as Galaxy maps the haul

9/7/2026

Nearly half the bitcoin taken in what Galaxy Research calls the "Wave 3" attacks on Coldcard hardware wallet users has moved on-chain, the firm says.

As of mid-August, Galaxy had identified roughly 1,779 BTC stolen from 190 victims across more than 8,600 addresses. The 55% still at rest is the figure to watch.

The address count is where the scope of this campaign becomes concrete.

More than 8,600 addresses tied to 190 victims tells you this was not a narrow operation, and Galaxy's ability to attribute that footprint to a single campaign is what makes the 45% fund movement significant for anyone watching $BTC on-chain flow.

Keep reading

Read the full story

Open on MarketPR