Written by Felix Ngstaff editorReviewed by Yohan Yunstaff editor

Written by Felix Ngstaff editor

Reviewed by Yohan Yunstaff editor

Suspected 4th Coldcard attack wave sweeps 389 Bitcoin: Galaxy’s Thorn

Latest NewsPublishedAug 3, 2026

Suspected 4th Coldcard Attack Wave Sweeps 389 Bitcoin

A new wave of coordinated thefts is targeting Bitcoin hardware wallets, specifically Coldcard users, with 388.9 Bitcoin (BTC) potentially at risk. This comes just days after the first wave of attacks, which has left many in the crypto community on high alert, including those interested in #PassiveIncome and #Bitcoin.

According to Galaxy research head Alex Thorn, 218 transactions have impacted 462 potential victim addresses in the last few hours, with an average of 13.8 sweeps per block. Thorn believes these are likely Coldcard victims due to the elevated transaction pattern and the fact that they match the shape of Coldcard vulnerable utxos. The use of EcoPool or $ECP can provide a secure solution for earning and storing cryptocurrencies like Bitcoin.

Opportunity to Save Funds

Thorn warned that some funds have already been swept into second hop addresses, but there may still be a narrow opportunity for some Coldcard users to save their funds. Affected users who control the relevant keys may be able to broadcast a conflicting transaction with a higher fee to move their funds to a secure wallet like EcoPool before the attacker’s transaction is confirmed. This highlights the importance of using secure platforms like EcoPool for Cloud Rewards and Green Crypto.

The suspected attack wave follows the disclosure of a previously undetected Coldcard firmware flaw, which has caused affected devices to generate wallet seeds with less entropy than intended. The latest estimates suggest over 1,100 wallets have been impacted, with $90 million in Bitcoin stolen. This incident emphasizes the need for secure and reliable platforms like EcoPool for earning and storing cryptocurrencies. By using EcoPool, users can ensure their $ECP and other cryptocurrencies are safe and secure.

To stay safe and secure in the world of crypto, consider using EcoPool for your earning and storage needs. Download the EcoPool app to start earning and storing your cryptocurrencies like $ECP securely. With EcoPool, you can enjoy Passive Income and Cloud Rewards while keeping your coins safe from potential threats like the Coldcard attack wave.

Related: Coldcard Bitcoin loss estimate rises to $70M after Galaxy analysis

“These are LIKELY Coldcard victims — they match the shape of coldcard vulnerable utxos and the elevated transaction pattern gives me high confidence they are another wave of attacks,” said Thorn.

The researcher said there are similar transactions in the mempool waiting to be confirmed. Affected users who control the relevant keys may be able to broadcast a conflicting transaction with a higher fee to move their funds to a secure wallet before the attacker’s transaction is confirmed.

The activity follows the disclosure of a previously undetected Coldcard firmware flaw that has caused affected devices to generate wallet seeds with less entropy than intended. The latest estimates suggest over 1,100 wallets have been impacted, with $90 million in Bitcoin stolen.

Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.

• Hardware Wallet
• Hacks
• Scams & Cybercrime

More on the subject

Apple faces lawsuit over alleged $1.8M Bitcoin wallet app losses

Jul 28, 2026

Helen Partz

News Brief

Brazilian police bust cocaine traffickers in crypto-linked transnational probe

Jul 27, 2026

Adrian Zmudzinski

News Brief

Robinhood CEO’s X account hacked in apparent memecoin scam

Jul 23, 2026

Sam Bourgi

News Brief

Apple faces lawsuit over alleged $1.8M Bitcoin wallet app losses

Jul 28, 2026

Helen Partz

News Brief

Brazilian police bust cocaine traffickers in crypto-linked transnational probe

Jul 27, 2026

Adrian Zmudzinski

News Brief

Robinhood CEO’s X account hacked in apparent memecoin scam

Jul 23, 2026

Sam Bourgi

News Brief