PANews, August 3: Alex Thorn, Research Lead at Galaxy Research, tweeted that a suspected fourth wave of organized Coldcard attacks is underway. Between blocks 960,778 and 960,792, 218 transactions were identified, involving 462 compromised addresses and 216 new destination addresses, totaling approximately 388.9 BTC. All affected accounts showed no prior input activity before the Coldcard firmware boundary. The transaction rate reached 13.8 per block, compared to 0.3 per block prior to the incident—roughly 45 times higher. Some funds have already been transferred to second-hop addresses, and similar transactions remain pending in the mempool. Confirmed transactions indicate that RBF has been enabled.
Galaxy Research: Suspected Fourth Wave of Coldcard Attacks Involving 462 Addresses and 388.9 BTC
PANewsShare
Today’s BTC news reports a suspected fourth wave of Coldcard attacks, according to Galaxy Research. Alex Thorn noted 218 transactions between blocks 960,778 and 960,792, involving 462 addresses and 388.9 BTC. All affected accounts had no prior input history prior to the Coldcard firmware boundary. Transaction rates surged to 13.8 per block—45 times higher than before. Some funds have been moved to second-hop addresses, with similar transactions still pending in the mempool. Confirmed transactions indicate that RBF is active. This BTC update underscores ongoing security concerns in the space.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.