The Coldcard seed-recreation exploit has drained at least 1,778 BTC, roughly $112 million, according to Galaxy Research. The first wave alone stole 1,082.65 BTC from 1,195 addresses within minutes. Approximately 1,531 BTC remains unmoved in attacker-controlled addresses, with no confirmed activity since August 6. Galaxy identifies a potential unconfirmed fourth wave of 638.5 BTC that would bring the total to 2,417 BTC, exceeding $150 million. The firm advises single-signature Coldcard holders to immediately move their funds to fresh addresses.
Source: Read the original article
