Coldcard Hack Sparks Biggest Sub-1 BTC Move Since FTX
A suspected Coldcard wallet hack has driven a massive surge in small Bitcoin transfers, with 39,600 BTC moved on Friday – the most since the FTX bankruptcy. Total losses have reached $88.6 million across thousands of addresses as the attack remains active, reigniting the self-custody debate.
Quick Take
Friday’s 39,600 BTC in sub-1 transactions surpassed all daily volumes since November 2022.
Galaxy Research tracked a third attack wave, adding 207.7 BTC ($13.2 million) in losses.
The ongoing hack has sparked renewed debate over the safety of self-custody versus ETFs.
Coldcard users are urged to move funds immediately as the attacker remains active.
Market Impact Analysis
BearishThe hack undermines confidence in self-custody, potentially causing short-term selling pressure, though impact is largely contained to Coldcard users.
Speculation Analysis
Key Takeaways
- Friday’s 39,600 BTC in sub-1 transactions surpassed all daily volumes since November 2022.
- Galaxy Research tracked a third attack wave, adding 207.7 BTC ($13.2 million) in losses.
- The ongoing hack has sparked renewed debate over the safety of self-custody versus ETFs.
- Coldcard users are urged to move funds immediately as the attacker remains active.
What Happened
A suspected hack targeting Coldcard hardware wallets has triggered an unprecedented wave of small Bitcoin transfers. On Friday, 39,600 BTC moved in sub-1 BTC transactions — the highest daily volume since the FTX collapse in November 2022. The attack, first detected in late July, remains active with no known vector. Galaxy Research identified a third attack wave on Saturday, prompting urgent warnings for Coldcard users to relocate their funds. The incident has thrust self-custody security back into the spotlight, as thousands scramble to protect their holdings from an unseen adversary.
The Numbers
The surge saw just 300 BTC shy of the 39,900 BTC moved on November 16, 2022, days after FTX filed for bankruptcy. The latest attack wave drained an additional 207.7 BTC ($13.2 million), pushing total estimated losses to 1,367 BTC ($88.6 million) across 4,585 addresses. Friday's movement marks a sudden spike, contrasting with typical daily volumes, and underscores the scale of panic triggered by the suspected breach.
Why It Happened
While the exact attack vector remains unknown, the suspected Coldcard hack has exploited a vulnerability that likely allows the attacker to compromise wallet addresses. The surge in transfers reflects users rushing to move funds to secure wallets, a rational response to an ongoing threat. The incident also reignites the perennial debate over self-custody risks versus the convenience of third-party custodians like ETFs. For many, the hack is a wake-up call about the hidden dangers of managing private keys, especially when hardware wallet flaws come to light.
Broader Impact
Beyond immediate losses, the hack has reopened the self-custody vs. custodial debate. Traditional finance advocates point to Bitcoin ETFs as a safer alternative, while crypto purists argue that proper key management can prevent such attacks. The event may erode confidence in hardware wallets, potentially accelerating the shift toward regulated custodial solutions. However, it also highlights the resilience of self-custody, as users were able to react before the attacker drained more funds.
What to Watch Next
- Identification of the attack vector and whether Coldcard issues a patch or advisory. Any delay could lead to further losses.
- Ongoing tracking of stolen funds by researchers like Galaxy Digital. Recovery efforts or movements to exchanges may signal cash-out attempts.
- Market sentiment shift if the hack spreads beyond Coldcard users, potentially impacting Bitcoin's price or the broader hardware wallet industry.
This article is for informational purposes only and does not constitute financial advice.
Always late to trends?
Join for the latest news, insights & more.
Disclaimer: Bytewit is an independent media outlet that delivers news, research, and data.
© 2026 Bytewit. All Rights Reserved. This article is for informational purposes only.
