According to Bitcoin Magazine, progress has been made in the investigation of the Coldcard hardware wallet theft incident in July 2026. In the first wave of attacks, about 1082.65 BTCs (about $118 million) were still stored in the attacker's address. The investigation found that the attacker used the payment account of a blockchain data service provider. The internal log was highly consistent with the stolen currency model, and the relevant clues had been handed over to the law enforcement department. Galaxy Research analyst Alex Thorn stated that the identities of the first wave of attackers may have been obtained by law enforcement agencies. In the following waves of attacks, a total of about 2000 BTC were stolen, with the second wave of about 76 BTC operating in a similar pattern to the first wave, possibly by the same perpetrator.
