Galaxy Research Flags Possible Fourth Wave of Coldcard Attacks, 462 Addresses and 388.9 BTC Involved
AI Market Summary
Galaxy Research reports a suspected fourth wave of organized Coldcard-related attacks moving ~388.9 BTC across 218 transactions from 462 compromised addresses, with a sharp spike in transaction frequency and additional transfers pending. Evidence of RBF-enabled transactions and second-hop movements suggests active laundering dynamics. The episode heightens near-term operational and custody-risk concerns for Bitcoin holders and can drive risk-off positioning around wallet security headlines.
Impact level
● Medium
Affected assets
BTC/USDT-0.33%
AI Insight · BTC/USDTAI Insight
▼ Bearish
Trade now
⚠️ AI-generated insights are based on news content and are provided for informational purposes only. They do not constitute investment advice or represent the views of BingX. Investing involves risk. Please trade responsibly.
PANews, Aug. 3 — Alex Thorn, research lead at Galaxy Research, said on X that a suspected fourth wave of coordinated Coldcard-related attacks appears to be in progress. Data from blocks 960,778 to 960,792 shows 218 transactions tied to 462 allegedly compromised addresses and 216 newly created destination addresses, moving about 388.9 BTC in total. Thorn noted that the impacted wallets showed no prior input activity before the Coldcard firmware boundary. Transaction intensity spiked to 13.8 per block from roughly 0.3 per block before the event, an increase of about 45 times. Some of the bitcoin has already been forwarded to second-hop addresses, with similar transactions still awaiting confirmation in the mempool. Confirmed on-chain activity indicates Replace-by-Fee (RBF) was enabled.
