Bitcoin wallet security rattled as $130M Coldcard hack moves a dormant $31M wallet

A bitcoin wallet that had sat untouched since 2013 suddenly sprang back to life this week, moving 500 BTC worth $31.3 million in a single transaction. The timing wasn’t random. It happened right as a security scare tied to Coldcard hardware wallets was rattling confidence in how people store their crypto, raising fresh questions about bitcoin wallet security at a moment when self-custody is supposed to be the safest option around.

Key takeaways

• A wallet labeled 18TExP, dormant since 2013, moved 500 BTC worth $31.3 million after 12.7 years of inactivity, first flagged by Whale Alert.
• Those same coins were worth roughly $500,000 the last time they moved, back in 2013.
• A flaw in Coldcard hardware wallets, dating back to March 2021, has been exploited by attackers since July 30, 2026, draining an estimated $130 million in BTC, according to researchers at Galaxy.
• On-chain data shows a broader pattern: 935 BTC dormant for 10+ years moved on August 3, and 6,388 BTC dormant five to seven years moved on July 31.
• Analytics firm Lookonchain suggested the 18TExP transfer may be a defensive move tied directly to the Coldcard hack.

Dormant Bitcoin Wallet Moves Millions After 12 Years

On its own, a wallet moving coins doesn’t say much — someone with an old private key simply decided it was time. But the scale and timing here made this transaction stand out immediately.

… Continue reading the full article at the original source below.