FBI May Have Identified Coldcard Hacker Behind 1,082 BTC Theft

TLDR

• The first Coldcard attack wave stole 1,082.65 BTC.
• Block traced the attacker to a paid blockchain data provider account.
• The provider’s logs reportedly matched the theft pattern with “extraordinary specificity.”
• More than 1,800 BTC was stolen across multiple Coldcard attack waves.
• The first-wave funds remain unmoved across three monitored addresses.

U.S. law enforcement may have identified the attacker behind the first and largest wave of the July 2026 Coldcard hardware wallet theft, after investigators traced an operational mistake linked to the movement of stolen Bitcoin. The first wave drained 1,082.65 BTC, while total losses across all known waves have exceeded 1,800 BTC from more than 5,000 addresses.

Block’s investigation found that the first-wave attacker used a paid account with a major blockchain data provider while preparing on-chain sweeps. Internal provider logs reportedly matched the timing, number and sequence of the attacker’s blockchain queries with what investigators described as “extraordinary specificity.”

… Continue reading the full article at the original source below.