Coldcard exploit tops $100 million in stolen BTC

The ongoing Coldcard exploit has pushed the total value of stolen Bitcoin above $100 million, according to unconfirmed reports tracking a wave of attacks against the popular hardware wallet, raising fresh questions about self-custody security for BTC holders.

What is known about the Coldcard exploit and the stolen BTC total

Research from Galaxy has linked the Coldcard hack to losses running into the hundreds of millions of dollars, with one estimate placing the total near $130 million. The nine-figure threshold is the key news hook here, marking this as one of the more significant hardware wallet incidents on record. For related coverage, see BlockDAG Ecosystem Benchmark: Decoding the 2026 Technical Execution Roadmap and Infrastructure Launch.

Security researchers have tied the losses to a flaw affecting the Coldcard hardware wallet, as detailed in reporting on the vulnerability. Coinkite, the maker of Coldcard, has posted updates through the official Coldcard account on X.

What is not yet firmly established is the exact number of affected wallets, the precise attack vector, and whether the running total will climb further. The story is developing, and the $100 million-plus figure should be read as a partial, evolving estimate rather than a confirmed final tally. For related coverage, see Major XRP Repricing Could Begin in the Next Few Months, Analyst Says.

How the incident could affect users, custody practices, and market confidence

Coldcard is a widely used device among Bitcoin self-custody advocates, which is why an exploit of this scale carries weight beyond a single product. Earlier reporting had already flagged the threat, including a claim that roughly $40 million in Bitcoin was stolen after 500 Coldcard wallets were compromised.

The exposure has continued to grow across successive waves, with a suspected fourth wave of attacks putting hundreds more BTC at risk. For current holders and prospective buyers, the core concern is custody risk: an incident like this can erode trust in hardware wallets generally, not just the affected model.

Market attention has followed. Bitcoin traded higher on August 4, with CoinDesk noting the exploit among the day’s market factors, even as broader sentiment stayed sensitive to security headlines. That backdrop sits alongside continued institutional interest, reflected in recent spot Bitcoin ETF net inflows.

What comes next for the investigation and wallet security response

With the full attack scope still unconfirmed, readers should watch for official guidance from Coinkite, any patch or security review, and updated loss figures from investigators. The company has been issuing statements through its X account, which remains the primary channel for user-facing updates.

The key signals to monitor are whether the total stops climbing, whether mitigation steps are formally issued, and whether independent researchers confirm the attack vector. Until those land, the situation should be treated as active and unresolved.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.