Galaxy Analysis, the analysis arm of Galaxy Digital, has recognized 1,196 addresses linked to the Coldcard pockets incident that misplaced a mixed 1,082.65 Bitcoin, price roughly $70.2 million on the time of the transactions.
Tracing the actions
Galaxy Analysis traced the Bitcoin flows between 1:10 AM and 1:51 AM UTC on July 30, spanning blocks 960,183 to 960,191.
The exercise occurred about 30 hours earlier than Coldcard printed its first safety advisory, in line with a Friday put up on X.
The brand new determine considerably raises earlier estimates.
AnchorWatch CEO Rob Hamilton initially calculated that 594.48 Bitcoin, price round $38 million, moved throughout 500 transactions inside a three-block window.
A recognizable on-chain sample
Galaxy Analysis stated the flagged transactions shared a definite signature, together with an identical charges of 30 satoshis per digital byte and no change outputs.
The agency famous the early assault exercise is identifiable by this fingerprint, however cautioned that future assaults in opposition to Coldcard-generated addresses could not comply with the identical sample.
Coinkite responds
Coinkite co-founder Rodolfo Novak stated in a Friday put up that the corporate takes duty for the firmware bug and is working to find out the total scope of the difficulty.
Novak stated Coinkite launched a hotfix to take away the software program fallback path, however warned the replace doesn’t defend seeds generated on susceptible firmware.
He suggested affected customers to maneuver their funds to a brand new seed as a precaution.