Crypto news report · source clearly identified
Coldcard Hacker Moves $7.7 Million, Targeting Nearly Half of Third‑Wave Bitcoin Haul
The attacker created 293 separate vaults for the stolen Bitcoin and is emptying them in order of size, starting with the largest.

A recent investigation reveals that a Coldcard hardware‑wallet exploit resulted in the theft of approximately $7.7 million worth of Bitcoin. The perpetrator organized the stolen funds into 293 distinct vaults and is now draining them, beginning with the largest vaults first.
Scale of the Theft
The stolen amount represents nearly half of what analysts refer to as the “third‑wave” Bitcoin haul, a series of large‑scale thefts that have been tracked over recent months.
Methodology
According to the report, the hacker systematically built 293 separate vaults to store the illicit Bitcoin. The emptying process follows a size‑based order, with the biggest vaults being targeted before smaller ones.
Implications for Coldcard Users
This incident underscores the importance of rigorous security practices for hardware‑wallet users, especially those employing Coldcard devices. Continuous monitoring and prompt response to any suspicious activity remain critical.
Source & attribution
News Source
- Publisher
- Decrypt
- Original date
- September 7, 2026, 11:09 AM
- Original headline
- Coldcard Hacker Moves $7.7M, Nearly Half of Third-Wave Bitcoin Haul