Coldcard theft puts 1,082 BTC under scrutiny

• A Coldcard wallet flaw was linked to the theft of about 1,082 BTC.
• Galaxy Research traced the coins to 1,196 drained Bitcoin addresses.
• The investigation has raised questions about whether law enforcement may identify the attacker.

An attacker drained about 1,082 BTC from wallets linked to a Coldcard firmware flaw.

Galaxy Research said 1,196 addresses were drained within about 41 minutes on July 30.

The stolen Bitcoin was worth about $70 million when the transactions occurred.

The flaw weakened wallet seed generation and made some private keys easier to recreate.

The theft did not require physical access to the affected Coldcard devices, according to security researchers.

Some stolen funds have remained in attacker-controlled addresses, while researchers continue tracking their movement.

Reports have suggested that victims contacted the FBI and other law enforcement agencies, but there is no public confirmation that the FBI has identified the attacker.