After Coldcard Was Hacked, $15 Billion in Bitcoin Moved to Safety

Decrypt08-12 18:16

In brief The Coldcard firmware exploit drained approximately 2,100 BTC, with losses estimated near $130 million across multiple attack waves. Onchain data from Checkonchain shows 233,000 BTC left long...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2659902851?lang=en_US&edition=fundamental","thumbnail":"https://img.decrypt.co/insecure/rs:fit:3840:0:0:0/plain/https://cdn.decrypt.co/wp-content/uploads/2025/05/Bitcoin-decrypt-style-20-gID_7.png@webp","is_english":true,"pubTime":"2026-08-12 18:16","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2659902851","market":"nz","top_or_hot":-1,"title":"After Coldcard Was Hacked, $15 Billion in Bitcoin Moved to Safety","media":"Decrypt","content":"<div>\n<p>In brief\nThe Coldcard firmware exploit drained approximately 2,100 BTC, with losses estimated near $130 million across multiple attack waves.\nOnchain data from Checkonchain shows 233,000 BTC left long...</p>\n\n<a href=\"https://decrypt.co//375450/coldcard-hack-15-billion-bitcoin-moved-safety\">Source Link</a>\n\n</div>\n","source":"decrypt_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>After Coldcard Was Hacked, $15 Billion in Bitcoin Moved to Safety</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nAfter Coldcard Was Hacked, $15 Billion in Bitcoin Moved to Safety\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-08-12 18:16 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://decrypt.co//375450/coldcard-hack-15-billion-bitcoin-moved-safety><strong>Decrypt</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>In brief\nThe Coldcard firmware exploit drained approximately 2,100 BTC, with losses estimated near $130 million across multiple attack waves.\nOnchain data from Checkonchain shows 233,000 BTC left long...</p>\n\n<a href=\"https://decrypt.co//375450/coldcard-hack-15-billion-bitcoin-moved-safety\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"CBOO","symbol_name":"Calamos Bitcoin Structured Alt Protection ETF - October","start_time":0,"source_url":"https://decrypt.co//375450/coldcard-hack-15-billion-bitcoin-moved-safety","article_id":"2659902851","we_media_id":null,"thumbnails":["https://img.decrypt.co/insecure/rs:fit:3840:0:0:0/plain/https://cdn.decrypt.co/wp-content/uploads/2025/05/Bitcoin-decrypt-style-20-gID_7.png@webp"],"rights":{"source":"decrypt_highlight","url":"https://decrypt.co//375450/coldcard-hack-15-billion-bitcoin-moved-safety","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2659902851","pubTimestamp":1786529764,"columns":[],"sourceInfo":{"source_id":"decrypt_highlight","name":"Decrypt"},"weMediaInfo":null,"summary":"Casa CEO Nick Neuman says the mass Bitcoin migration after the $130M Coldcard exploit proves distributed self-custody is Bitcoin's immune system—not its vulnerability.","collect":0,"end_time":0,"defaultTopTitle":"decrypt.co","property":[],"viewcount":null,"language":"en","relate_stocks":{"CBOO":"Calamos Bitcoin Structured Alt Protection ETF - October","IBIT":"比特币ETF-iShares","BRRR":"比特币ETF-CoinShares","CBTO":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - October","BPI":"Grayscale Bitcoin Premium Income ETF","BTCO":"比特币ETF-Invesco Galaxy","DEFI":"比特币期货ETF-Hashdex","CBTY":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - July","HODL":"比特币ETF-VanEck","DFII":"FT Cboe Vest Bitcoin Strategy & Target Income ETF","BITU":"2倍做多比特币期货ETF-Proshares","BFAP":"FT Vest Bitcoin Strategy Floor15 ETF - April","CBXA":"Calamos Bitcoin 90 Series Structured Alt Protection ETF – April","BTRN":"比特币期货ETF-Global X","ARKB":"比特币ETF-21Shares","CBOY":"Calamos Bitcoin Structured Alt Protection ETF - July","BTCW":"比特币ETF-Wisdom Tree","CBXJ":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - January","BCCC":"Global X Bitcoin Covered Call ETF","QBF":"Innovator Uncapped Bitcoin 20 Floor ETF - Quarterly","BITX":"2倍比特币期货ETF-Volatility Shares","BTCZ":"T-Rex 2X Inverse Bitcoin Daily Target ETF","BAGY":"Amplify Bitcoin Max Income Covered Call ETF","XBTY":"GraniteShares YieldBOOST Bitcoin ETF","BITY":"Amplify Bitcoin 2% Monthly Option Income ETF","CBXO":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - October","BTC":"Grayscale Bitcoin Mini Trust","GBTC":"比特币ETF-Grayscale","CBXY":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - July","MNRS":"GRAYSCALE BITCOIN MINERS ETF","CBOA":"Calamos Bitcoin Structured Alt Protection ETF - April","FBTC":"比特币ETF-Fidelity","BITB":"比特币ETF-Bitwise","BTCC":"Grayscale Bitcoin Covered Call ETF","MAXI":"比特币期货ETF-Simplify","CBOJ":"Calamos Bitcoin Structured Alt Protection ETF - January","SBIT":"2倍做空比特币期货ETF-Proshares","BTCI":"NEOS Bitcoin High Income ETF","CBTA":"Calamos Bitcoin 80 Series Structured Alt Protection ETF – April","BETE":"等权重比特币&以太币期货ETF-ProShares","BFJL":"FT Vest Bitcoin Strategy Floor15 ETF - July","BTF":"比特币&以太币期货ETF-CoinShares","BITI":"1倍做空比特币期货ETF-Proshares","CBTJ":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - January","BETH":"比特币&以太币期货ETF-ProShares","BTFX":"比特币期货ETF-CoinShares","BITO":"比特币期货ETF-ProShares","BTCL":"T-REX 2X LONG BITCOIN DAILY TARGET ETF"},"translate_title":"Coldcard 被黑客攻击后，比特币 150 亿美元转移到安全地带","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"BTC":0.6,"BITX":0.6,"CBTO":0.6,"BFJL":0.6,"BITI":0.6,"CBTJ":0.6,"BITO":0.6,"DEFI":0.6,"BPI":0.6,"BTCL":0.6,"BITU":0.6,"BTRN":0.6,"CBOA":0.6,"CBOJ":0.6,"CBOO":0.6,"IBIT":0.6,"CBTA":0.6,"BRRR":0.6,"BTCI":0.6,"BTCW":0.6,"HODL":0.6,"QBF":0.6,"MAXI":0.6,"BFAP":0.6,"ARKB":0.6,"BETH":0.6,"BTF":0.6,"CBXJ":0.6,"CBXA":0.6,"CBXY":0.6,"CBXO":0.6,"BCCC":0.6,"BTCZ":0.6,"MNRS":0.6,"FBTC":0.6,"BETE":0.6,"BAGY":0.6,"BITB":0.6,"BITY":0.6,"SBIT":0.6,"CBOY":0.6,"CBTY":0.6,"BTCC":0.6,"BTFX":0.6,"XBTY":0.6,"DFII":0.6,"BTCO":0.6,"GBTC":0.6},"content_text":"In brief\nThe Coldcard firmware exploit drained approximately 2,100 BTC, with losses estimated near $130 million across multiple attack waves.\nOnchain data from Checkonchain shows 233,000 BTC left long-term holder wallets in the days around the breach.\nCasa CEO Nick Neuman, citing actual customer conversations, says some of that 233,000 BTC came from Ledger and Trezor users—not Coldcard owners—who upgraded to multisig after watching the hack unfold.\nIn the days after the worst hardware wallet exploit in Bitcoin’s recent history, Casa CEO Nick Neuman began counting more than just the BTC being drained from vulnerable Coldcard wallets.While attackers were draining Coldcard wallets one address at a time, 233,000 BTC—worth about $15 billion at today’s prices—was quietly moving in search of safety.Myriad: Bitcoin's next move? Click to make your prediction.The massive and ongoing breach that started on July 30 has already led to close to $130 million in stolen Bitcoin from Coldcard hardware wallets—physical gadgets that store private keys entirely offline, never connecting to the internet, and made by Canadian company Coinkite.A firmware bug introduced in March 2021 had routed key generation through a weak software random number generator instead of the device's dedicated hardware chip. Private keys (the secret codes that prove ownership of Bitcoin and authorize any transaction) became guessable, with security collapsing from 128 bits to roughly 40—the cryptographic equivalent of a bank vault that turns out to have a four-digit PIN.\nThe onchain metrics around the Coldcard incident reinforce how important self custody is to the resilience of Bitcoin as an asset class. \nIn the couple of days around the hack:- 2.1k BTC was stolen- 22k moved to exchanges- 233k moved out of long term holder wallets in on… pic.twitter.com/iewr5RvG9c\n— Nick Neuman (@Nneuman) August 9, 2026Galaxy Research tracked the fallout across three confirmed attack waves, with losses reaching approximately 1,596 BTC across more than 5,200 addresses.Casa’s Neuman, earlier this week, posted the on-chain numbers from analyst James Check of Checkonchain to make an argument for Bitcoin’s resilience. Self-custody, holding your own private keys rather than leaving Bitcoin with an exchange or custodian, didn't buckle under pressure but instead adapted, he argued.\"The onchain metrics around the Coldcard incident reinforce how important self-custody is to the resilience of Bitcoin as an asset class,\" Neuman wrote on X.The breakdown Neumann cited in his post, drawing Checkonchain’s onchain data: 2,100 BTC stolen (higher than Galaxy's own accouting), and 22,000 BTC moved to exchanges. And 233,000 BTC moved out of long-term holder wallets—addresses dormant for at least 155 days, a cohort analysts watch as a proxy for serious, patient investors—into safety. That’s more than 100 times what the attackers took.\nThe Coldcard incident resulted in Long-Term Holder supply declining by ~233k BTC, a 1.38% fall from its recent all-time high.\nWith such a meaningful event, an important question is whether the emergency migration of coins has skewed the onchain metrics we use to analyse Bitcoin.… pic.twitter.com/FPVLUkUlqU\n— _Checkonchain (@_checkonchain) August 7, 2026Some of that came from Coldcard users migrating to multisig wallets (setups requiring multiple independent keys to approve any transaction, so no single compromised device can drain everything). Some came from holders on Ledger and Trezor—entirely different hardware—who used the hack as a wake-up call.Casa confirmed both patterns from actual customer conversations. \"So somewhere between ~10x-100x the amount of bitcoin stolen was moved to safety as people sounded the alarm,\" Neuman wrote.When a centralized exchange gets breached, everything goes at once. Here, the attacker had to crack addresses individually, earning a trickle at a time while the rest of the network had time to respond. \"This is a giant flashing neon sign showcasing the resilience that self-custody adds to the network,\" Neuman wrote. \"If all that BTC was held at a custodian and the custodian was hacked instead, those numbers would have been flipped.\"Data from analytics company Glassnode confirms the scale: long-term holder supply dropped from nearly 15 million BTC to approximately 14.7 million—the largest weekly decline since December 2024. It happened while Bitcoin traded roughly 50% below its all-time high of $126,000, set in October 2025.Coinkite has urged anyone who generated a seed on firmware versions 4.0.1 through 4.1.9—covering March 2021 to July 2026—to treat those wallets as compromised and migrate to a new seed immediately.Daily Debrief NewsletterStart every day with the top news stories right now, plus original features, a podcast, videos and more.Your EmailGet it!Get it!Facebook\" subject=\"After Coldcard Was Hacked, $15 Billion in Bitcoin Moved to Safety\" type=\"button\">Reddit\" subject=\"After Coldcard Was Hacked, $15 Billion in Bitcoin Moved to Safety\" type=\"button\">","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.47.1","shortVersion":"4.47.1","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2659902851","isCrawlerRequest":true}