Hackers behind the recent Coldcard exploit have transferred millions of dollars worth of Bitcoin and Ethereum to cryptocurrency mixers. While most stolen funds remain traceable, this move could hinder
In a significant development related to the Coldcard hack, which has become the third-largest crypto heist in 2026, hackers have transferred approximately 64 Bitcoin (worth about $4.17 million) and 200 Ethereum (valued at around $380,000) from attacker-controlled wallets to cryptocurrency mixers such as Wasabi and Tornado Cash.
The transfer of funds was reported by blockchain security firm CertiK, which noted that the Bitcoin transaction occurred on Tuesday, while the Ether transfer took place on Wednesday. These actions are part of a broader strategy employed by hackers to obscure the origin of stolen assets through mixing protocols.
According to CertiK’s analysis, most of the victim funds remain in attacker-controlled addresses with limited attempts at mixing. Blockchain intelligence firm TRM Labs also highlighted that 'differences in transaction construction' during each attack wave suggest multiple attackers were involved, aligning with Galaxy Digital's findings that identified 15 different exploiters.
The use of cryptocurrency mixers by the hackers indicates a sophisticated approach to laundering stolen funds and complicates efforts to trace or recover these assets. This move could significantly reduce the chances of successful asset recovery for victims.
This incident underscores the ongoing threat posed by hardware wallet vulnerabilities and the importance of robust security measures in self-custody environments. The Coldcard exploit, which was due to a firmware bug that weakened key strength from 128 bits to just 40 bits, serves as a stark reminder of the risks associated with outdated or insecure technology.
For traders and investors, this incident highlights the necessity of using secure practices when handling cryptocurrency. It also emphasizes the need for continuous monitoring and vigilance against potential threats in the crypto space. As more hackers copycat the initial exploit, it is crucial to stay informed about emerging vulnerabilities and security best practices.
Source: Cointelegraph. Summarized and rewritten by the Vexoda Newsroom. This is market news, not financial advice.