Potential losses tied to the Coldcard Bitcoin hack are approaching $114 million, as security researchers track what may be a fourth sweep of funds linked to the hardware wallet exploit. The figure remains an evolving estimate rather than a confirmed total, and much of the reporting is still developing.
The incident centers on Coinkite’s Coldcard, a Bitcoin hardware wallet, and a series of on-chain movements that observers believe drained value from affected devices. Reporting from CoinDesk indicates losses may near $114 million as a possible fourth sweep of funds emerged.
At this stage the losses should be treated as potential and partly projected rather than fully verified. The earlier stage of the same event was documented when Coldcard exploit losses reached $88 million, and the higher figure reflects newly attributed transfers rather than a single confirmed theft.
How The Near-$114 Million Figure Is Framed
The estimate is an aggregate of Bitcoin movements linked to compromised or at-risk Coldcard wallets, not a single audited loss statement. It combines already-swept balances with funds that appeared exposed as additional sweeps were identified.
Because the total climbed as new activity surfaced, the number should be read as a running tally that could shift again. That distinction matters: it reflects at-risk and drained value observed on-chain, not a finalized reconciliation.
Notably, the pattern of small transfers has been part of how analysts have followed the funds. Coincu has tracked how Coldcard losses neared $114M as small Bitcoin transfers spiked, underscoring that the estimate is built from observed chain behavior.
The Suspected Weak Point: Seed Generation
The most concrete technical thread points to how certain Coldcard devices generated wallet seeds. Coinkite published a Coldcard Mk3 seed generation warning addressing risk in how some seeds were produced.
If a seed phrase can be predicted or reconstructed, an attacker can derive the private keys and move funds without ever touching the physical device. That would make the issue product-level rather than a case of individual user error such as phishing.
Coincu has connected this thread to on-chain movement, reporting on the Coldcard Mk3 seed risk warning tied to a $38.3M BTC transfer. The available evidence does not confirm every technical detail of the exploit path, so the seed-generation link remains the strongest documented lead rather than a settled conclusion.
Where The Stolen Bitcoin Is Going
One unusual element is the destination of affected funds. According to reporting that contrasts the episode with the FTX collapse, the Coldcard exploit has prompted investors to send Bitcoin back to exchanges.
That behavior suggests some holders are moving out of self-custody in response to the uncertainty, a reaction shaped by the exploit rather than a broad market event.
What Coldcard Users Should Watch
Users concerned about exposure should review Coinkite’s official seed-generation warning to understand whether their device or setup falls within the affected conditions. Verifying against the vendor’s own guidance is the most direct check available in the current reporting.
The prudent posture, given that details are still developing, is to rely on confirmed vendor communications rather than acting on unverified sweep totals. The near-$114 million figure is the headline, but it remains an estimate that may be revised as more transactions are attributed.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
