Coldcard-linked Bitcoin sweeps intensify; losses near $114M after fourth wave

AI Market Summary
A fourth wave of sweeps targeting Coldcard-generated Bitcoin addresses has reportedly lifted total losses to ~1,816 BTC (~$114M) across 5,200+ addresses, reinforcing acute self-custody and wallet-supply-chain risk. The attacker's use of replace-by-fee creates a narrow window for some victims to outbid pending sweeps, but the episode can pressure near-term risk sentiment and increase urgency around UTXO hygiene and wallet migration.
Impact level
● High
Affected assets
BTC/USDT+0.90%
AI Insight · BTC/USDTAI Insight
▼ Bearish
Trade now
⚠️ AI-generated insights are based on news content and are provided for informational purposes only. They do not constitute investment advice or represent the views of BingX. Investing involves risk. Please trade responsibly.
A fourth round of sweeps targeting Bitcoin addresses generated by Coldcard ran on Monday, according to Galaxy Research analyst Alex Thorn (@intangiblecoins). Thorn reported about 449 BTC taken from 709 addresses believed to belong to victims. The latest activity brings estimated losses since July 30 to roughly 1,816 BTC—about $114 million—spanning more than 5,200 addresses. In an unusual twist, the attacker enabled replace-by-fee (RBF). That leaves a narrow window for victims with still-unconfirmed transactions to submit a higher-fee transaction and move funds before the sweep confirms. Thorn urged affected users to migrate funds immediately using high fees.