Nearly $114M of Bitcoin Lost in Continued Coldcard Attacks | CoinDesk Daily artwork

Nearly $114M of Bitcoin Lost in Continued Coldcard Attacks | CoinDesk Daily

CoinDesk Podcast Network

August 3, 2026

Coldcard wallet losses may near $114 million. A flaw in how Coldcard hardware wallets generated their keys let an attacker sweep roughly 594 bitcoin — about $38 million — from around 500 wallets in just 25 minutes. The bug traces back to a March 2021 firmware update.
Speakers: Sam Ewen
**Sam Ewen** (0:00)
Coldcard losses may near $114 million in a fourth wave of attacks. And Trump Media's Bitcoin bet is effectively over. This is CoinDesk Daily.
RealFi, a smarter stablecoin backed by real world assets. Join the testnet now at realfi.co. A fourth wave of attacks hit Bitcoin addresses generated by the Coldcard wallet early Monday, pushing total losses toward $114 million. Galaxy Research's Alex Thorne says the attackers opted for replace by fee, which means a pending theft can be overridden. A victim who spots their address in the mempool can pay a higher fee and move their coins out first.
Losses now span more than 5,200 addresses since July 30th. Strategy sold another 1,638 Bitcoin last week for about $105 million and raised $290 million more by selling common stock. The company also bought back $81 million of its high-yield preferred stock, STRC, and is holding that dividend at 12%.
The sales bring Strategy's stash to roughly 842,000 Bitcoin. And Trump Media's discretionary Bitcoin position is effectively gone. Wallets tied to the Truth Social Parent Company moved 2,628 Bitcoin, worth about $165 million, to crypto.com on Saturday. Trump Media bought in near last year's cycle top at an average of about $118,000 a coin and has since moved out more than $7,200 of them. Get more updates on coindesk.com. RealFi, a smarter stablecoin backed by real world assets. Join the testnet now at realfi.co.

Feed this to your agent

Try it now — copy, paste, done:

curl -H "x-api-key: pt_demo" \
  https://spoken.md/transcripts/1000651996090

Works with Claude, ChatGPT, Cursor, and any agent that makes HTTP calls.

From $0.10 per transcript. No subscription. Credits never expire.

Using your own key:

curl -H "x-api-key: YOUR_KEY" \
  https://spoken.md/transcripts/YOUR_EPISODE_ID