Key facts
- Quantifying losses from the Coldcard hack is challenging due to the self-custody nature of the wallets.
- CryptoQuant has confirmed 1,432 Bitcoin in losses based on victim reports and on-chain analysis.
- Galaxy Research estimates a minimum of 1,730 Bitcoin in high-confidence losses, with potential for more.
- TRM Labs estimates attackers drained approximately 1,816 Bitcoin from over 5,200 addresses.
- Victim reports are crucial for investigators to corroborate attack patterns and identify unknown victims.
Investigators are facing challenges in determining the exact financial impact of the Coldcard hack, a situation complicated by the self-custody nature of the affected wallets. Unlike exchange hacks, there is no central ledger of victims, forcing investigators to rely on a combination of direct victim reports and on-chain analysis to piece together the scale of the theft.
CryptoQuant, a blockchain analytics firm, has reported confirmed losses of 1,432 Bitcoin. This figure is derived from victim disclosures and cross-referenced with known on-chain patterns. Head of research Julio Moreno emphasized a cautious approach, stating that relying solely on on-chain patterns could lead to false positives and inflate the total.
Galaxy Research and TRM Labs, however, suggest a higher toll. Galaxy's Alex Thorn indicated their high-confidence minimum loss estimate stands at 1,730 Bitcoin, with potential for further increases as more victim reports emerge. Thorn noted that while 450+ BTC were directly confirmed from victims, their reports also helped identify other victims, contributing to over 730 BTC in identified losses. Galaxy is withholding figures for suspected but uncorroborated amounts.
TRM Labs' analysis aligns with Galaxy's range, estimating that attackers drained approximately 1,816 Bitcoin from more than 5,200 addresses across four distinct waves. Ari Redbord, TRM's global head of policy, advised that estimates are likely to continue rising before stabilizing. The difficulty in pinpointing a definitive number underscores the complexities of quantifying losses from decentralized, self-custody wallets.