Bitcoin cold-wallet attack spreads to 4,500 addresses as losses near $89 million

Galaxy Research flagged a third wave of sweeps tied to weak Coldcard-generated keys, with the attacker now targeting smaller balances and changing how funds are collected onchain.

The top 3

  1. Top 3 Overall Crypto Hacks by Value: The largest crypto heist recorded was the Bybit exchange breach in February 2025, with approximately $1.4 billion stolen, followed by the Ronin Network hack ($615M-$625M) and the Poly Network exploit ($610M).
  2. Top 3 Largest DeFi Protocol Exploits: Decentralized finance (DeFi) protocols have been major targets, with the Ronin Bridge hack in March 2022 leading to $625 million in losses, followed by the Wormhole exploit ($326 million) and the KelpDAO rsETH exploit ($292 million).
  3. Top 3 Potential Compromise Vectors for Cold Wallets: Even cold wallets face risks from insecure private key generation, as seen with the 'Randstorm' vulnerability affecting BitcoinJS library-generated keys, physical theft or compromise of the device, and supply chain attacks involving malicious firmware.

Sources

Open the full topic