How much Bitcoin did the Coldcard hacker move?

The hacker moved approximately 45% of the Bitcoin reportedly stolen in the third attack.

What method was used to launder the stolen Bitcoin?

The funds were reportedly routed through CoinJoin, a Bitcoin transaction-mixing method designed to enhance privacy.

Was this the first reported Coldcard attack?

No. The headline describes the incident as the third reported attack.

Coldcard Hacker Moves 45% of Bitcoin Stolen in Third Attack, Launders Funds Through CoinJoin

A hacker linked to a third attack involving Coldcard moved roughly 45% of the Bitcoin allegedly stolen in the incident. The funds were reportedly routed through CoinJoin, a transaction-mixing method used to improve privacy on the…

bloomingbit

Publisher

Sep 7, 2026 at 11:57 PM UTC · 2 min de lecture

The hacker behind Coldcard’s third attack moved 45% of the stolen assets, or 97.09 BTC worth about $7.8 million.
Galaxy Research said the hacker was laundering funds by swapping and moving Bitcoin through THORChain and CoinJoin.
Total losses tied to the Coldcard firmware flaw were estimated at 1,806 BTC worth about $143.9 million, and about 82% of the stolen assets remain at the original addresses.

Forecast Trend Report by Period

The hacker behind the attack on Bitcoin hardware wallet Coldcard has moved 45% of the assets stolen in the third attack.

The Block reported on September 7 that Galaxy Research said the suspected hacker behind Coldcard’s third attack continues to move the stolen Bitcoin. After swapping part of the stolen funds into Ether through THORChain on September 2, the hacker moved more Bitcoin on September 6 using CoinJoin.

A total of 97.09 BTC, worth about $7.8 million, has been moved so far. According to Galaxy Research, the hacker has been shifting funds starting with the wallets holding the largest amounts. Funds from the 11 largest wallets have already been moved. The next 10 untouched wallets still hold a combined 30.81 BTC. Another 233 smaller wallets hold 33.77 BTC.

Coldcard Hacker Moves 45% of Bitcoin Stolen in Third Attack, Launders Funds Through CoinJoin

Unlock deeper intelligence.

News

Markets

Company

Resources

Read the full layer.

Get the signal, not the noise.