Crypto加密$BTC

Coldcard Bitcoin loss estimate rises to $70M after Galaxy Research analysis

Hardware wallet security has moved to the center of Bitcoin's custody debate as the estimated cost of the Coldcard wallet incident reaches $70 million. Galaxy Research placed that figure on the event after identifying 1,196…

By Mateo Fuentes·August 1, 2026·二〇二六年八月一日·2 min read

Key takeaways

  • Galaxy Research estimates the Coldcard wallet incident cost $70 million.
  • The analysis identified 1,082.65 BTC lost across 1,196 distinct addresses.
  • All the losses occurred within a 41-minute window, suggesting a systematic rather than manual process.
  • The losses spread across nearly 1,200 wallets, meaning any resulting supply overhang arrives fragmented rather than in a single block.
  • Galaxy Research's figures are now the working numbers cited for the Coldcard incident.

Hardware wallet security has moved to the center of Bitcoin's custody debate as the estimated cost of the Coldcard wallet incident reaches $70 million. Galaxy Research placed that figure on the event after identifying 1,196 addresses that lost 1,082.65 $BTC inside a 41-minute window, expanding the estimated scope of the incident beyond prior assessments.

Galaxy Research expands the loss count

Earlier tallies understated the damage. Galaxy Research's analysis traced 1,082.65 $BTC in losses across 1,196 distinct addresses, all within a 41-minute window. The compression of that sweep into under an hour points to a systematic process rather than a manual one, a distinction that shapes how the incident is categorized and how exchanges should approach screening inflows from the affected wallets.

The address count matters as much as the $BTC figure. Losses spread across nearly 1,200 wallets mean any supply overhang arrives fragmented rather than in a single block. Fragmented supply of this kind is harder to read on liquidation maps and less likely to trigger a single, visible cascade.

The Coldcard incident in the cold-storage cycle

Coldcard hardware wallets carry a specific reputation in the self-custody market: the device is designed to sign transactions in isolation from networked environments. An incident with $70 million in estimated losses, now tied by Galaxy Research to a defined set of 1,196 addresses and a 41-minute execution window, applies pressure to that reputation and to the sector-wide assumption that air-gapped hardware removes the primary attack surface.

The demand environment for cold-storage devices is partly built on distrust of centralized custodians. A high-profile loss event on the hardware side applies pressure from a different direction entirely.

Macro read-through

Against the backdrop of growing regulatory scrutiny on digital asset custody, a loss event this size with address-level forensics from a named research firm gives policymakers a concrete number to cite. Galaxy Research's identification of 1,196 affected addresses and 1,082.65 $BTC in losses is now the working figure for the Coldcard incident.

Related reading

Source · 來源

cointelegraph.com

Share · 分享

Frequently asked

How much is the Coldcard incident estimated to have cost?

Galaxy Research estimates the incident cost $70 million, corresponding to 1,082.65 BTC lost across 1,196 addresses.

How quickly did the losses occur?

All the losses took place within a 41-minute window, which points to a systematic automated process rather than a manual one.

Why does the number of affected addresses matter?

Because losses spread across nearly 1,200 wallets mean any supply overhang arrives fragmented, making it harder to read on liquidation maps and less likely to trigger a single visible cascade.

Why is this incident significant for hardware wallets?

Coldcard devices are designed to sign transactions in isolation from networked environments, so a $70 million loss pressures that air-gapped reputation and the assumption that such hardware removes the primary attack surface.

Why does this matter for regulators?

Amid growing regulatory scrutiny of digital asset custody, a loss event of this size with address-level forensics from a named research firm gives policymakers a concrete number to cite.