Odaily Planet Daily reports: Galaxy Research posted on X that attacks targeting Coldcard wallets generated with weak random numbers are still ongoing, and the team is urging users to immediately move funds from affected Coldcard single-signature wallets to secure addresses.
It stated that approximately 600 suspected attacker addresses, believed to hold funds stolen from Coldcard wallets with weak randomness, have been submitted to federal investigators, industry compliance bodies, and cross-industry cybersecurity investigators.
The team also noted that victims proactively shared their wallet addresses and transaction hashes, helping researchers establish on-chain attack patterns and further identify additional compromised wallets and attack addresses. Various stakeholders across the Bitcoin and broader cryptocurrency industry are currently assisting with user asset protection and attack attribution efforts.
Galaxy Research previously posted on X that a third wave of attacks targeting Coldcard address generation has emerged, with 207.7294 BTC already withdrawn. According to on-chain tracking data, the Coldcard wallet attack incident now involves approximately 1,367.05 BTC, valued at around $88.6 million, affecting 4,585 addresses.