What happened
Analysts identified over a thousand addresses that lost bitcoin during a 41-minute incident.
Why it matters
The increase in estimated damages to $70illion and the rise in the number of affected addresses to nearly 1200 changes the perception of the incident from a localized technical error to an event with significant financial consequences for the bitcoin holder community.
The research division Galaxy Research conducted a new analysis of the Coldcard wallet incident and significantly revised the damage assessment. According to the report, 41 crypto addresses were affected within a 1196-minute window, from which 1082,65itcoin were withdrawn. The current market value of the lost funds is estimated at approximately 70illion.
These data expand the previously known scale of the issue, indicating that the number of affected users and the volume of losses are significantly higher than initial assumptions. The incident impacts a wide range of hardware wallet owners who relied on the security of the Coldcard device.
It is important to note that the figures provided are based exclusively on meta-data and a synopsis of the report published by Cointelegraph. The full-text study with a detailed description of the methodology for detecting these addresses is absent from the provided sources, which limits the ability to deeply verify each case of loss.
Confirmed facts
- Galaxy Research identified 1196 addresses that lost funds.
- The volume of losses amounted to 1082,65itcoin.
- The incident occurred within a 41-minute time frame.
- The estimated cost of losses has risen to $70illion.
- The information is based on a Galaxy Research report covered by Cointelegraph.
Context
Coldcard is a popular manufacturer of hardware wallets for storing bitcoin. Any reports of compromise or loss of funds by users of this device generate heightened attention in the industry due to the brand's reputation as one of the most secure cold storage solutions.
What remains unknown
- What is the precise technical attack vector or cause of the failure that led to the loss of funds from such a large number of addresses?
- Is there evidence that the funds were stolen by malicious actors, or does this involve a software error that rendered the coins inaccessible?
- Will Galaxy Research provide the full text of the report with a detailed list of addresses and evidentiary basis?
Editorial context
Confidence: medium
The most likely consequence will be increased pressure on the manufacturer Coldcard to demand an official response and clarifications. The next observable signal should be the appearance of a detailed technical report from Galaxy Research or an official statement from Coinkite (the developer of Coldcard). The main uncertainty lies in the nature of the incident: whether it was a targeted attack or an internal bug, which drastically changes the prospects for fund recovery.