Coldcard hack sparks biggest sub-1 BTC move since FTX: CryptoQuant
A suspected Coldcard hardware wallet hack has led to 39,600 BTC being moved in small transactions, marking the highest daily level since the FTX collapse in November 2022.
Intelligence analysis by Gemini 2.5 Flash
The ongoing Coldcard hack has prompted a significant surge in small Bitcoin transfers, with users moving funds from potentially compromised addresses. This incident has reignited a critical debate within the crypto community regarding the security and practicality of self-custody versus relying on centralized platforms or regulated financial products like Bitcoin ETFs.
Imagine your digital money is like coins in a special digital piggy bank called a Coldcard. Some of these piggy banks had a flaw, and bad guys managed to steal money from them. Because of this, many people quickly moved their coins from their Coldcard piggy banks to other, safer spots. This big rush of small money moves hasn't been seen since a huge digital bank had problems, making everyone talk about whether it's better to keep your own money or let a big company hold it for you.
Analysis
Unprecedented Small Transfers
The recent Coldcard hack has triggered an extraordinary movement of Bitcoin, with 39,600 BTC transferred in transactions under 1 BTC on a single day. This volume represents the highest daily level of such small transfers since November 16, 2022, just days after the catastrophic collapse of the FTX cryptocurrency exchange. CryptoQuant's head of research, Julio Moreno, noted this significant activity, observing that 'Bitcoin plebs had not moved this amount of BTC in a day since the FTX collapse,' indicating a strong, reactive response from individual users.
This surge in small-scale transfers is a direct consequence of users taking proactive measures to secure their assets in the wake of the suspected Coldcard compromise. The comparison to the FTX fallout underscores the severity of the perceived threat, as users are once again compelled to take immediate action to protect their holdings, reflecting a deep-seated concern about the security of their digital assets.
Escalating Losses and Persistent Threat
The financial toll of the Coldcard hack continues to mount, with estimated losses now reaching 1,367 BTC, equivalent to approximately $88.6 million, affecting 4,585 addresses. Galaxy Research, a division of Galaxy Digital, reported that the latest identified wave of the attack drained an additional 207.7 BTC, valued at about $13.2 million, indicating the ongoing and evolving nature of the security breach.
Alex Thorn, Galaxy Digital's head of firmwide research, issued a stark warning that the attack remains active, urging all users who have not yet done so to immediately move funds from Coldcard-generated addresses. The continuous identification of new victim and attacker addresses by researchers, aided by user reports, highlights the persistent threat and the collaborative effort required to track and mitigate the impact of the stolen funds.
The Enduring Self-Custody Debate
The Coldcard incident has reignited a fundamental debate within the cryptocurrency space concerning the risks and benefits of Bitcoin self-custody. Nick Neuman, CEO of Bitcoin security company Casa, defended the principle, arguing against claims that 'self-custody is over.' He emphasized that the distributed nature of self-custody provides users with crucial time to react to security breaches, estimating that potentially ten times more Bitcoin is protected through self-custody than has been stolen in this attack.
Conversely, traditional finance proponents, such as Bloomberg senior ETF analyst Eric Balchunas, have leveraged the incident to advocate for Bitcoin exchange-traded funds (ETFs) as a safer and more convenient alternative for many users, citing the established operating history of the ETF industry. However, many in the crypto community counter that the Coldcard incident represents a failure of a specific wallet provider rather than a systemic flaw in the concept of self-custody itself, underscoring the nuanced perspectives on digital asset security.
Key points
- A suspected Coldcard hardware wallet hack has caused 39,600 BTC to be moved in small transactions.
- This volume of small Bitcoin transfers is the highest recorded since the FTX collapse in November 2022.
- Estimated losses from the hack have reached 1,367 BTC, valued at approximately $88.6 million, affecting 4,585 addresses.
- Galaxy Research warns the attack is still active, urging users to move funds from Coldcard-generated addresses immediately.
- The incident has reignited the debate over the security of Bitcoin self-custody versus relying on third-party platforms or ETFs.
The rapid movement of funds by users demonstrates a proactive and informed community, suggesting that self-custody, despite its risks, empowers individuals to react swiftly to threats. This incident could lead to improved security practices and more robust hardware wallet designs, strengthening the overall self-custody ecosystem.
The ongoing nature of the hack and the significant financial losses could erode trust in hardware wallets and the broader self-custody paradigm. This might push more users towards centralized exchanges or regulated financial products, potentially undermining the decentralized ethos of Bitcoin.
