What we know about the attack
Translation:Hvad vi ved om angrebet
Paragraph:This would be the fourth known wave targeting Coldcard devices. The previous three waves collectively drained thousands of Bitcoin from users who believed their funds were safe in cold storage. This time, 389 BTC — worth roughly $25 million at current prices — is at risk. Thorn's warning came via social media, urging users to act fast.
Translation:Dette ville være den fjerde kendte bølge mod Coldcard-enheder. De tidligere tre bølger drænede tilsammen tusindvis af Bitcoin fra brugere, der troede, at deres midler var sikre i kold opbevaring. Denne gang er 389 BTC — værd omkring 25 millioner dollars til nuværende priser — i fare. Thorns advarsel kom via sociale medier, hvor han opfordrede brugerne til at handle hurtigt.
Note: "cold storage" -> "kold opbevaring" (common term). "drained" -> "drænede" (past tense). "worth roughly" -> "værd omkring". "urging" -> "opfordrede". Next heading:The narrow window
Translation:Det snævre vindue
Paragraph:Thorn pointed to unconfirmed transactions as the key detail. Some Coldcard users may still have a chance to move their funds before attackers finalize the theft. But the window is tight. If a transaction hasn't been broadcast yet, or if it's stuck in the mempool, there's a small opening. Users need to check their wallets immediately.
Translation:Thorn pegede på ubekræftede transaktioner som den vigtigste detalje. Nogle Coldcard-brugere kan stadig have en chance for at flytte deres midler, før angriberne fuldfører tyveriet. Men vinduet er snævert. Hvis en transaktion ikke er blevet sendt endnu, eller hvis den sidder fast i mempoolen, er der en lille åbning. Brugerne skal tjekke deres wallets med det samme.
Note: "key detail" -> "vigtigste detalje". "finalize the theft" -> "fuldfører tyveriet". "stuck in the mempool" -> "sidder fast i mempoolen" (mempool is a technical term, keep as is). "small opening" -> "lille åbning". "immediately" -> "med det samme". Next heading:Who's behind the warning
Translation:Hvem står bag advarslen
Paragraph:Alex Thorn leads research at Galaxy Digital, a major crypto financial services firm. He's been tracking Coldcard-related attacks closely. His public alert this week is the most detailed signal yet that the threat isn't over. Thorn didn't name a specific attacker or group, but the pattern matches earlier waves.
Translation:Alex Thorn leder forskningen hos Galaxy Digital, et stort krypto-finansielt servicefirma. Han har fulgt Coldcard-relaterede angreb tæt. Hans offentlige advarsel denne uge er det hidtil mest detaljerede signal om, at truslen ikke er overstået. Thorn nævnte ikke en specifik angriber eller gruppe, men mønsteret matcher tidligere bølger.
Note: "leads research" -> "leder forskningen". "major crypto financial services firm" -> "et stort krypto-finansielt servicefirma" (we can also say "krypto-finansielt serviceselskab"). "tracking closely" -> "fulgt tæt". "most detailed signal yet" -> "det hidtil mest detaljerede signal". "isn't over" -> "ikke er overstået". "pattern matches" -> "mønsteret matcher". Next heading:What users should do now
Translation:Hvad brugerne bør gøre nu
Paragraph:Anyone using a Coldcard should check for unconfirmed outgoing transactions they didn't authorize. If they see one, they should try to replace-by-fee or contact their wallet provider. For those who haven't been hit yet, moving funds to a new seed — generated on a clean device — is the safest bet. The next few hours could decide whether that 389 BTC stays lost or gets saved.
Translation:Enhver, der bruger en Coldcard, bør tjekke for ubekræftede udgående transaktioner, de ikke har godkendt. Hvis de ser en, bør de forsøge at erstatte med højere gebyr (replace-by-fee) eller kontakte deres wallet-udbyder. For dem, der endnu ikke er ramt, er det sikreste at flytte midlerne til en ny seed — genereret på en ren enhed. De næste par timer kan afgøre, om de 389 BTC forbliver tabt eller bliver reddet.
Note: "replace-by-fee" is a technical term, we can keep it as is or translate as "erstat mod gebyr" but it's commonly known as RBF. I'll keep "replace-by-fee" in parentheses. "wallet provider" -> "wallet-udbyder". "haven't been hit yet" -> "endnu ikke er ramt". "moving funds to a new seed" -> "flytte midlerne til en ny seed" (seed is a term, keep as is). "clean device" -> "ren enhed". "safest bet" -> "sikreste". "decide whether" -> "afgøre om". "stays lost or gets saved" -> "forbliver tabt eller bliver reddet". Now meta description: "Galaxy's Alex Thorn warns of a suspected fourth Coldcard attack wave involving 389 Bitcoin. Unconfirmed transactions may give some users a narrow window to save funds." Translation: "Galaxys Alex Thorn advarer om en
