Chainalysis has revealed that Canadian Bitcoin holders accounted for 25% of the losses in the recent Coldcard wallet exploit, while the hacker behind the theft transferred an additional 30.185 BTC (approximately $1.94 million) to a new wallet just hours ago. The combined reports underscore the concentrated damage in Canada and the ongoing security risks for self-custody users.
In a post on X preserved in a research brief, Chainalysis stated that Canadian victims represented a quarter of the losses tied to the Coldcard incident. A July 31, 2026 CoinDesk report had already described the exploit as reaching $38 million at that point, but the geographic breakdown adds a new dimension to the story. The concentration in Canada does not imply a distinct technical failure unique to that country; rather, it highlights an unusually high share of affected users there.
Separately, Lookonchain reported that the Coldcard hacker—previously responsible for stealing 2,055 BTC valued at around $130 million—has moved an additional 30.185 BTC to a fresh wallet. This transfer rekindles fears of further thefts and signals that the stolen funds remain in motion. The original breach severely undermined confidence in the Coldcard hardware wallet, a device marketed for secure cryptocurrency storage. Coinkite, the manufacturer, has published an official warning on its Mk3 seed generation page, which users are urged to consult for remediation guidance.
The hacker’s renewed activity serves as a stark reminder of the vulnerabilities in the cryptocurrency space, even within hardware wallets designed for maximum security. Traders and Bitcoin holders are advised to monitor wallet activity closely and follow official updates from Coinkite. The incident also arrives amid a broader surge in Web3 exploits, with losses hitting $482.6 million in Q1 2026, according to earlier reporting.
