$100M Coldcard Hack Won’t Break Bitcoin’s Rally
Bitcoin’s price has shrugged off the largest hardware wallet exploit in crypto history, with the self-custody hack draining over $100 million from Coldcard devices since late July, yet markets have remained largely unmoved. The incident—which compromised an estimated 7,300 addresses across multiple attack waves and could ultimately total $130 million in losses—has exposed a critical vulnerability in devices long considered the gold standard for serious Bitcoin holders, yet failed to trigger the panic selling many would have expected.
The Coldcard Exploit: Scope and Timeline
On July 30, 2026, attackers began systematically draining Bitcoin from Coldcard hardware wallets whose seeds had been generated on firmware versions 4.0.1 through 4.1.9, a range spanning from March 2021 through the patch release in July 2026. The initial assault was brutally efficient: in just 41 minutes, attackers emptied 1,196 addresses of approximately 1,083 Bitcoin, worth roughly $70.2 million at the time.
Galaxy Research has now confirmed total losses at approximately 1,596 BTC across three documented attack waves, equivalent to more than $100 million, from roughly 7,300 addresses. A suspected fourth wave could push cumulative losses toward 2,055 BTC, or around $130 million. The third identified wave alone resulted in the drainage of 207.73 BTC from thousands of additional addresses. By early August, as additional sweeps continued, Galaxy’s tally had climbed to approximately 1,816 BTC—roughly $116 million—across more than 5,200 addresses.
The scope makes this the largest hardware wallet exploit in history and the third-largest crypto hack on record, surpassed only by the 2016 Bitfinex exchange hack and certain decentralized finance collapses from 2022.
Technical Vulnerability and Attack Mechanics
The flaw affects Mk3 Coldcard devices on firmware 4.0.1 or later, as well as Mk4, Mk5, and Q devices running older firmware versions. Dormant since 2021, the vulnerability allows attackers to guess poorly randomized seed keys and systematically drain funds from single-signature addresses. The sweeps appear deliberate and programmatic, likely orchestrated with automation, and Galaxy researchers flagged that every single-sig Coldcard address created after the 2021 update is ultimately vulnerable.
The victims were predominantly long-term holders. Stolen coins had sat untouched for an average of 3.18 years before being taken, underscoring that many users had simply left their Bitcoin dormant on the devices for extended periods. Coinkite, the company behind Coldcard, has urged users to treat the situation as urgent and migrate funds immediately. The stolen Bitcoin from the three documented waves currently remain parked in attacker addresses and have not moved to exchanges or mixers, suggesting attackers may be holding positions or waiting for market conditions to shift.
Market Response: Muted Despite the Scale
Despite the magnitude of losses and the status of Coldcard as a trusted custody solution, Bitcoin’s price reaction has been remarkably subdued. On August 1, Bitcoin traded near $62,900, having spent the preceding week grinding through the low $60,000s with minimal volatility. By Friday, August 7, Bitcoin had moved higher to $65,143.87, while Ethereum climbed to $1,929.36. As of today, August 9, 2026, Ethereum is trading at $1,914.37.
The lack of panic liquidation suggests several factors at work. First, most affected users were long-term holders unlikely to capitulate on holdings. Second, the attack’s sophistication may have limited awareness among casual market participants. Third, broader macroeconomic drivers have dominated trading sentiment this week.
Macroeconomic Drivers and On-Chain Technicals
Bitcoin and Ethereum prices have responded positively to July employment data that significantly missed economist expectations. Bloomberg surveys had projected 80,000 new jobs created in July with an unchanged unemployment rate. Instead, the economy shed 23,000 jobs while the unemployment rate ticked down to 4.1%. This weaker-than-expected labor market has encouraged expectations for potential Federal Reserve rate cuts, providing tailwinds to risk assets including crypto.
This employment surprise comes against a backdrop of a “higher-for-longer” monetary environment, where the Federal Reserve has maintained the federal funds rate at 3.50% to 3.75% amid stubborn inflation and elevated oil prices. The gap between expectations and reality has shifted sentiment slightly toward optimism on rate trajectory.
On-chain metrics present a mixed picture. Block Digest’s proprietary BD Pulse Score stands at 43 out of 100, indicating bearish sentiment overall. The RSI is at 54.57, suggesting neither overbought nor oversold conditions, while the funding rate sits at a modest positive 0.0055%, indicating mild long bias. Notably, long positions now account for 53.9% of open interest against 46.1% short, representing a 1.17 long-to-short ratio that shows retail and leveraged traders leaning directionally bullish despite the broader bearish pulse reading.
Bitcoin dominance holds steady at 55.42%, suggesting Ethereum has maintained relative strength. If Bitcoin successfully defends support in the $62,000 to $63,000 range and prints a four-hour close above $65,000, momentum could build toward testing resistance near $67,000.
What This Means for the Market
The Coldcard exploit represents a watershed moment for self-custody narrative and hardware wallet trust, yet its failure to crater markets underscores the current dominance of macro factors over security incidents. Affected users are reported to be moving Bitcoin back onto centralized exchanges like Coinbase, potentially creating a secondary wave of exchange inflows that could weigh on future rallies. At the same time, the incident has refocused attention on custody infrastructure at a time when long-term holders had grown complacent about firmware updates.
August’s historical weakness—with a median return of negative 7.87% and a perfect streak of red closes since 2022—looms as a headwind despite recent bullish price action. The combination of positive labor data, mixed on-chain sentiment, and calendar seasonality suggests choppy trading ahead until clearer economic signals emerge.
Bitcoin’s resilience in the face of a nine-figure self-custody hack suggests market participants are pricing custody risk as idiosyncratic rather than systemic, leaving the macro narrative and rate expectations as the true drivers of near-term direction.
—
Disclaimer: This content is for informational purposes only and does not constitute financial advice. Cryptocurrency markets are highly volatile and unpredictable. All trading decisions should be made based on your own research and risk tolerance. Block Digest is not responsible for any financial losses incurred as a result of acting on this content.
