Attackers have moved only 246 of 1,778 stolen BTC, leaving most funds frozen in controlled wallets since early August.
Hackers have stolen at least 1,778 BTC, worth over $150 million, from Coldcard hardware wallet users, with 1,531 BTC remaining unmoved in attacker-controlled addresses. Only 246 BTC has been transferred, primarily into Coinjoin transactions to obscure trails.
No high-confidence attacker activity has been detected since August 6, though new victim reports continue to surface. Researchers have directly confirmed losses from over 190 affected users, expanding the known footprint of the breach.
The slow movement of stolen funds suggests attackers may be struggling to liquidate assets without detection, though the total loss estimate could rise as more victims come forward.