The hacker behind the Coldcard wallet exploit has moved 30.185 BTC — roughly $1.94 million — to a new wallet, the first activity from the address in weeks. The transfer happened just hours ago, according to blockchain data, breaking a quiet stretch that had lasted for weeks.
The hacker is believed to hold 2,055 BTC, about $130 million in stolen bitcoin, making them the largest beneficiary of the theft.
First movement in weeks
The transfer of 30.185 BTC is the first move from the wallet in weeks. Why the hacker chose now to shift funds isn't clear, but it's the first sign of life from the address since the exploit.
The destination wallet is new, and the funds haven't moved further so far.
The scale of the haul
Even after this transfer, the hacker still controls more than 2,000 BTC. That's a substantial chunk of the total stolen in the Coldcard incident, which targeted users of the hardware wallet.
The exact total of the theft hasn't been fully disclosed, but the hacker's share is the largest. At current prices, the 30.185 BTC is worth about $1.94 million, a fraction of the total.
Why the move matters
Movement from a long-dormant wallet often signals an attempt to cash out or launder funds. In this case, the amount is small relative to the total, which could mean the hacker is testing the waters or preparing a larger move.
The wallet has been under scrutiny since the exploit, and any transfer is likely to be watched closely by blockchain analysts and law enforcement. No arrests have been announced in connection with the case.
What could come next
It's unclear whether the hacker will move more funds or attempt to exchange the bitcoin for fiat or other assets. The next transfer, if any, will be closely monitored.
For now, the hacker's identity remains unknown, and the motive for this particular move is a mystery.
