Coldcard Exploit Confirmed at 1,719 BTC Stolen as Galaxy Research Warns Losses May Top $130 Million

The scale of the Coldcard hardware wallet exploit is becoming sharply clear. Galaxy Research has now confirmed with high confidence that at least 1,719 BTC have been stolen across multiple user accounts, valuing the compromise at roughly $111 million at recent prices.

But that number may not be the ceiling. Total losses, according to the research team’s latest assessment cited in the original report, are likely to surpass $130 million once all outstanding cases are verified.

More than 25 distinct attack patterns have been identified, and investigators now believe that multiple threat actors are actively exploiting the vulnerability. The number of victims is piling up; Galaxy confirmed it has received reports from over 250 individuals.

If every case is ultimately confirmed, the total haul could climb past 2,300 BTC. For now, the only hardware known to be affected are Coldcard Mk3, Mk4, Mk5, and the Q model.