Coldcard hack mixers received stolen funds this week. Hackers transferred 64 BTC and 200 ETH to crypto mixers.
The Bitcoin was worth $4.17 million. The Ether was worth $380,000. CertiK reported the transfers on Wednesday.
Why Coldcard hack mixers matter
CertiK identified the Bitcoin transfer from address bc1q0. It went to Wasabi protocol on Tuesday.
“We think it might be a smaller exploiter,” a CertiK spokesperson said. “There’s likely a few copycats after the initial exploit.” The 200 ETH went to Tornado Cash on Wednesday.
Mixers like Tornado Cash scramble cryptocurrency from multiple users. This breaks the publicly traceable on-chain link. It makes tracing stolen funds difficult. Asset recovery becomes much harder.
The bigger picture
The Coldcard exploit is now the third-largest crypto hack of 2026. It drained at least $100 million in Bitcoin. Three confirmed attack waves hit 7,300 victim wallets. Galaxy Digital reported this figure.
A suspected fourth wave could bring losses to $130 million.
TRM Labs found most funds still in attacker-controlled addresses. Limited mixing attempts occurred so far. Differences in transaction construction suggest multiple attackers.
Galaxy previously identified at least 15 different attackers. A March 2021 firmware bug weakened seed randomness. Key strength dropped from 128 bits to 40 bits. This made the keys “brute-forceable without physical access.”
Dragonfly managing partner Haseeb Qureshi noted something interesting. Roughly “$2 of AI hardening” could have prevented the exploit. Some AI models rediscovered the vulnerability in under 20 minutes.
