--- title: 'Bitcoin Cold Wallet Attack Expands to 4,500 Addresses, Losses Top $89M' url: >- https://www.cryptocatalyst.news/articles/2026-08-01-bitcoin-cold-wallet-attack-expands-to-4500-addresses-losses-top-89m canonical: >- https://www.cryptocatalyst.news/articles/2026-08-01-bitcoin-cold-wallet-attack-expands-to-4500-addresses-losses-top-89m date: '2026-08-01T20:51:17.560374+00:00' category: bitcoin tags: - bitcoin - security - cold-wallet - coldcard - hack source: CoinDesk source_url: >- https://www.coindesk.com/tech/2026/08/02/bitcoin-cold-wallet-attack-spreads-to-4-500-addresses-as-losses-near-usd89-million publisher: CryptoCatalyst summary: >- A Bitcoin cold wallet attack exploiting weak Coldcard keys has spread to 4,500 addresses with losses nearing $89 million. Galaxy Research reports a third wave targeting smaller bal image: >- https://www.cryptocatalyst.news/images/articles/2026-08-01-bitcoin-cold-wallet-attack-expands-to-4500-addresses-losses-top-89m.webp generated_by: automated editorial pipeline --- # Bitcoin Cold Wallet Attack Expands to 4,500 Addresses, Losses Top $89M A sophisticated attack on Bitcoin cold wallets has now affected 4,500 addresses, with total losses nearing $89 million. The attacker is exploiting weak keys generated by Coldcard wallets and has shifted tactics to target smaller balances and alter how funds are collected on-chain. ## Key takeaways - Bitcoin cold wallet attack now affects 4,500 addresses with losses near $89 million. - Galaxy Research flagged a third wave of sweeps exploiting weak Coldcard-generated keys. - Attacker is targeting smaller balances and changing on-chain fund collection methods. - Coldcard has released firmware updates to address the vulnerability. A sophisticated attack on Bitcoin cold wallets has escalated, now affecting 4,500 addresses and resulting in losses of nearly $89 million. The attacker is exploiting weak keys generated by Coldcard wallets, a popular hardware wallet, and has shifted tactics to target smaller balances and alter how funds are collected on-chain. ## Attack Expands to Third Wave The attack, first identified by Galaxy Research, involves the exploitation of weak cryptographic keys generated by certain Coldcard wallet models. The attacker has conducted three waves of sweeps, systematically targeting wallets with vulnerable keys. In the latest wave, the attacker has adjusted their methods to avoid detection, including changing how they move stolen funds on-chain. ## Why the Timing Matters The attack’s expansion comes at a time when Bitcoin security is under increased scrutiny. With the total losses nearing $89 million, this incident highlights the vulnerabilities in hardware wallets and the importance of strong key generation practices. The attacker’s ability to adapt their tactics underscores the need for continuous vigilance in the crypto space. ## What It Means for You If you own a Coldcard wallet, it’s crucial to check if your device is affected. Coldcard has released updates to address the vulnerability, and users are advised to update their firmware immediately. Additionally, if you hold Bitcoin in a cold wallet, consider reviewing your security practices and ensuring your keys are generated securely. For those affected, the best course of action is to transfer any remaining funds to a new, secure wallet and monitor your addresses for any unusual activity. The crypto community is closely watching this situation, and further updates from Coldcard and security researchers are expected. ## What to Watch Next - **Coldcard Updates**: Keep an eye on announcements from Coldcard regarding firmware updates and security patches. - **Security Advisories**: Follow updates from security researchers and crypto news outlets for the latest on this attack. - **Community Reactions**: Monitor discussions in crypto forums and social media for user experiences and additional security tips. This incident serves as a reminder of the importance of robust security practices in the crypto space. As the attack continues to evolve, staying informed and proactive is key to protecting your assets. ## FAQ ### What is a cold wallet? A cold wallet is a cryptocurrency wallet not connected to the internet, providing enhanced security for storing Bitcoin and other cryptocurrencies. ### How can I check if my Coldcard wallet is affected? Check the latest security advisories from Coldcard and update your firmware to the latest version to protect against known vulnerabilities. ### What should I do if I suspect my wallet has been compromised? Transfer any remaining funds to a new, secure wallet and monitor your addresses for any unusual activity. Follow updates from Coldcard and security researchers for further guidance. ## Source This article is a summary of reporting by [CoinDesk](https://www.coindesk.com/tech/2026/08/02/bitcoin-cold-wallet-attack-spreads-to-4-500-addresses-as-losses-near-usd89-million), written by an automated editorial pipeline. See https://www.cryptocatalyst.news/editorial-policy. ## How to cite CryptoCatalyst.news, "Bitcoin Cold Wallet Attack Expands to 4,500 Addresses, Losses Top $89M", 2026-08-01, https://www.cryptocatalyst.news/articles/2026-08-01-bitcoin-cold-wallet-attack-expands-to-4500-addresses-losses-top-89m