Coldcard attacker prioritizes emptying third batch vaults first, 97.09 BTC already moved, worth approximately $7.7 million
2026-09-08 15:31
Odaily News, according to Bitcoin News monitoring, the Coldcard attacker is prioritizing the emptying of the largest portion of the third batch of vaults. Galaxy Research stated that these wallets have transferred out 97.09 BTC, worth approximately $7.7 million, accounting for about 45% of the assets in this batch. The attacker created 293 2/2 vaults on their own and previously moved some tokens through THORChain on September 2, followed by multiple rounds of CoinJoin over the weekend. The vulnerability stems from a 2021 firmware flaw that reduced seed entropy to a minimum of 40 bits. Approximately 82% of the tokens stolen in this exploit remain unmoved.
