Coldcard Hacker Moves $7.7M, Nearly Half of Third-Wave Bitcoin Haul
60-second summary
A hacker exploiting Coldcard hardware wallets siphons roughly $7.7 million in Bitcoin, creating 293 distinct vaults and draining them sequentially from largest to smallest. The operation represents nearly half of the “third‑wave” Bitcoin haul reported this year, highlighting persistent supply‑chain vulnerabilities and prompting exchanges and custodians to tighten firmware verification, which could tighten market liquidity.
The attacker built 293 separate vaults for the stolen Bitcoin and is emptying them in order of size, largest first.