Investigators consider the mixing activity separate from the seven-address cluster. Earlier findings suggested that several attackers exploited the same across different waves.
Galaxy Research estimated confirmed losses near 1,596 BTC. A suspected additional wave could raise the total to about 2,055 BTC, while other researchers placed losses above 1,800 BTC. The flaw affected seed phrases created with weakened random-number generation. Firmware updates prevent new vulnerable seeds, but they cannot repair seed phrases already exposed.
Affected users must create a new wallet seed and move their Bitcoin. Coldcard also destroyed remaining vulnerable inventory and urged users to generate fresh seeds.
South Korea’s Bitcoin community reported virtually no direct losses despite many experienced holders owning Coldcard devices. linked that outcome to local self-custody practices. Community leaders had promoted independent entropy generation instead of relying on one device maker. Users often rolled dice or flipped coins before deriving BIP39 seed phrases offline.