Coldcard Wallet Losses May Near $114 Million as Possible Fourth Sweep Emerges
A possible fourth sweep of Coldcard wallets may push losses to $114 million. Users have minutes to act if they see their address in the mempool.
Key takeaways
- A possible fourth sweep of Coldcard wallets could push total losses to nearly $114 million.
- Replace-by-fee (RBF) transactions give users a narrow window to secure their funds.
- Users should monitor the mempool for suspicious activity and act quickly if their address appears.

A potential fourth sweep of Coldcard wallets could bring total losses to nearly $114 million. The pending transactions are using the replace-by-fee (RBF) method, giving users a narrow window to act if they spot their address in the mempool.
How Replace-by-Fee Creates a Window for Users
Replace-by-fee (RBF) is a Bitcoin transaction feature that allows a sender to replace a pending transaction with a higher fee to prioritize it. In this case, the hackers are using RBF to sweep funds from Coldcard wallets. If a user sees their address in the mempool — the waiting area for unconfirmed Bitcoin transactions — they have minutes to broadcast their own transaction with a higher fee and move their funds first.
How to Protect Your Funds
If you own a Coldcard wallet, monitor the mempool for any suspicious activity. Tools like Blockstream's Block Explorer or mempool.space can help you check for pending transactions involving your address. If you see your address, you can broadcast a new transaction with a higher fee to secure your funds. The key is to act quickly, as the window to do so is very short.
Broader Context of Coldcard Wallet Losses
This potential fourth sweep follows previous incidents that have already resulted in significant losses. The total losses from these hacks could reach $114 million, highlighting the importance of security measures for cryptocurrency wallets. Users are advised to stay vigilant and keep an eye on their transactions, especially if they use Coldcard wallets.
The recent spate of Coldcard wallet hacks underscores the need for robust security practices in the crypto space. As the industry evolves, so do the tactics of hackers, making it crucial for users to stay informed and proactive.
Frequently asked questions
What is replace-by-fee (RBF)?
Replace-by-fee (RBF) is a Bitcoin feature that allows a sender to replace a pending transaction with a higher fee to prioritize it.
How can I check if my Coldcard wallet is affected?
Use tools like Blockstream's Block Explorer or mempool.space to monitor the mempool for pending transactions involving your address.
What should I do if I see my address in the mempool?
Broadcast a new transaction with a higher fee to secure your funds before the hackers can sweep them.