Galaxy Research Flags 600 Suspected Addresses Linked to Coldcard Attacks

Odaily Planet Daily reports that Galaxy Research said on X that attacks tied to Coldcard wallets created with weak randomness remain ongoing, urging users to immediately move funds from affected Coldcard single-signature wallets to secure addresses. The firm said it has submitted about 600 suspected attacker addresses—believed to be holding crypto stolen from Coldcard wallets generated with insufficient randomness—to federal investigators, industry compliance organizations, and cross-industry cybersecurity investigators. Galaxy Research added that victims voluntarily provided wallet addresses and transaction hashes, helping researchers map on-chain attack patterns and uncover additional compromised wallets and attacker-controlled addresses. Stakeholders across Bitcoin and the broader crypto industry are assisting efforts to protect user assets and attribute the attacks. Galaxy Research previously stated that a third wave of attacks targeting Coldcard address generation had emerged, with 207.7294 BTC already withdrawn. On-chain tracking data now puts the incident at about 1,367.05 BTC—roughly $88.6 million—impacting 4,585 addresses.