Alex Thorn, Head of Research at Galaxy Research, stated that a suspected fourth wave of organized Coldcard attacks has occurred. Between blocks 960,778 and 960,792, Alex Thorn identified 218 transactions involving 462 compromised addresses and 216 new destination addresses, totaling approximately 388.9 BTC. All affected accounts showed no prior input activity before the Coldcard firmware boundary; the transaction rate was 13.8 per block, compared to a prior rate of 0.3 per block. Some funds have already been transferred to second-hop addresses, and pending transactions remain in the mempool. Confirmed transactions indicate that RBF has been enabled.
Alex Thorn: Fourth Wave of Coldcard Attacks Suspected, Involving 462 Addresses and 388.9 BTC
AiCoinShare
Summary
Galaxy Research’s Alex Thorn reported a suspected fourth wave of Coldcard attacks on Proof of Work (PoW) networks. Between blocks 960,778 and 960,792, 218 transactions were identified, affecting 462 victim addresses and 216 new destinations, totaling 388.9 BTC. All affected accounts had no prior input history before the Coldcard firmware boundary. The transaction rate surged to 13.8 per block, up from 0.3 per block previously. Some funds were moved to second-hop addresses, with pending transactions still in the mempool and RBF enabled on confirmed transactions. Proof of Stake (PoS) systems remain unaffected.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.