flash on Nostr: ⚡️🔎 UPDATE - Stolen Coldcard BTC remains frozen in plain sight Around 90% of ...
⚡️🔎 UPDATE - Stolen Coldcard BTC remains frozen in plain sight
Around 90% of the roughly 1,600 BTC stolen in the COLDCARD exploit has not moved since the initial send to a hacker controlled address.
About 10% (160 BTC) has only been shuffled to second-hop wallets.
Thus far:
- 0 BTC cashed out through exchanges
- 0 BTC sent through mixers or CoinJoin
The first and largest theft took 41 minutes.
Laundering it is proving far harder, with roughly 600 attacker addresses now flagged by US law enforcement, exchanges, and blockchain analytics firms.
The funds remain fully traceable and effectively frozen under constant surveillance.
Published at
2026-08-04 19:19:42 UTCEvent JSON
{
"id": "a8c0221697151ceda7226f224464e452cafd1d12a66c2f22b4de5f126199453c",
"pubkey": "4d7842051782e0d3feb034d150adc2b6bae4ee3b49786793bffa468b6f5b96b3",
"created_at": 1785871182,
"kind": 1,
"tags": [
[
"client",
"Primal iOS"
]
],
"content": "⚡️🔎 UPDATE - Stolen Coldcard BTC remains frozen in plain sight\n\nAround 90% of the roughly 1,600 BTC stolen in the COLDCARD exploit has not moved since the initial send to a hacker controlled address.\n\nAbout 10% (160 BTC) has only been shuffled to second-hop wallets.\n\nThus far:\n- 0 BTC cashed out through exchanges\n- 0 BTC sent through mixers or CoinJoin\n\nThe first and largest theft took 41 minutes. \n\nLaundering it is proving far harder, with roughly 600 attacker addresses now flagged by US law enforcement, exchanges, and blockchain analytics firms. \n\nThe funds remain fully traceable and effectively frozen under constant surveillance. \nhttps://blossom.primal.net/c8ee006f8fc7a1e8069544f51c36ba44c08ae2abbc2bca41f066436ee6d6ccbc.jpg",
"sig": "c5012efd5a9ab754b1bf7ce822e78cd85630ffe2a88ac2143e5b8f626a35b5b11337ddf9d1fccbed0340175bb0470d7e0814c0934e2f6580ebe177e07e5e2a5a"
}
