What happened
Galaxy Digital's Head of Research highlights the risk of fund loss and a narrow window of opportunity to save bitcoins.
Why it matters
The warning affects the security of savings for users of a popular hardware wallet brand and points to a real mechanism for protecting funds before transactions are finalized.
Alex Thorn, Head of Research at Galaxy Digital, issued a warning regarding a suspected fourth wave of cyberattacks targeting users of Coldcard hardware wallets. According to available data, 389itcoins may have already been stolen as a result of these incidents.
Thorn noted a critical detail in the mechanism of the current threat: the presence of unconfirmed transactions could provide asset owners with a narrow time window to save their funds. This means that under certain conditions, users still have the ability to prevent the final loss of cryptocurrency.
The situation requires heightened vigilance from device owners, as the nature of the attack allows malicious actors to initiate withdrawals that are not yet permanently recorded on the blockchain. The researcher's actions are aimed at informing the community about countermeasures at this specific moment in time.
Confirmed facts
- Alex Thorn, Head of Research at Galaxy Digital, warned of a possible fourth wave of attacks on Coldcard users.
- A loss of 389itcoins is reported during the suspected attacks.
- Unconfirmed transactions may give users a chance to save their funds.
Context
The information is based on a report by a single independent outlet, Cointelegraph, which relayed the expert's words. Data on the amount of stolen funds and details of the vulnerability come exclusively from this source and currently lack independent confirmation from other media or an official report from Coinkite (the developer of Coldcard).
What remains unknown
- What is the technical vector of this specific attack, and does it differ from the previous three waves?
- Has the manufacturer, Coldcard, confirmed the existence of a new vulnerability or mass thefts?
- Exactly how many users are affected beyond the mentioned sum of 389 BTC?
- What specific actions must users take to utilize the 'narrow window' for saving funds?
Editorial context
Confidence: medium
The most likely consequence will be a surge in wallet status checks by Coldcard users and a possible temporary suspension of device usage until details are clarified. The next observable signal will be an official statement from Coldcard developers or the emergence of a detailed technical breakdown from other cybersecurity firms. The main uncertainty lies in whether this wave is the result of a new firmware vulnerability or another sophisticated phishing campaign masquerading as a system failure.