Coldcard, the Bitcoin hardware wallet manufactured by Coinkite and widely used for self-custody of Bitcoin signing keys, is at the center of a suspected fourth attack wave, with approximately 388.9 BTC cited as the amount connected to the reported incident. As of publication, the event remains unconfirmed, and the figure should be treated as a preliminary, approximate estimate rather than a verified loss.

Key Details

• The incident is described as a suspected fourth attack wave, not a confirmed final determination.
• The only quantitative detail currently available is an approximate figure of 388.9 BTC.
• No transaction hash, threat actor identity, root cause, or remediation step has been confirmed at this stage.

What Is Known About the Suspected Fourth Attack Wave

The core claim is narrow: a fourth wave of attack activity is suspected in connection with Coldcard, and roughly 388.9 BTC is the amount reported in relation to it. The designation "suspected" carries significant weight, as the available research does not include a verified on-chain trace or an official disclosure confirming the movement of funds.

Because the underlying evidence remains partial, it is important to distinguish what is asserted from what is proven. At this stage, both the "fourth wave" characterization and the BTC figure represent assertions; independent confirmation of either has not yet been established.

An approximate BTC figure attached to a still-developing incident frequently shifts as blockchain addresses are clustered and analysts reconcile inflows and outflows. Until a block explorer entry surfaces — complete with a transaction hash, timestamp, and sender-receiver details — the reported amount should be regarded as provisional.

Why the Incident Matters for Wallet Security and User Risk

Repeated attack waves, even before every detail is confirmed, raise the stakes for hardware wallet users because the pattern itself suggests a persistent adversary rather than an isolated event. A recurring campaign signals unresolved exposure more strongly than a single standalone report.

The relevance is practical rather than theoretical. Coldcard devices are designed to keep Bitcoin private keys offline, signing transactions in isolation from internet-connected computers. Any credible indication that a wave of attacks undermines that core security model warrants close attention to official channels and incident disclosures from Coinkite.

When hardware wallet compromises do occur, they typically involve attack vectors distinct from DeFi protocol exploits — such as supply chain tampering, firmware vulnerabilities, physical side-channel attacks, or social engineering targeting seed phrase handling. Understanding which vector applies is essential before drawing conclusions about whether other devices or users are affected.

Suspected exploits have been a recurring theme across the cryptocurrency sector. For example, Ostium faced a suspected eight-figure exploit on Arbitrum, where early loss estimates circulated well before a full accounting was possible. The same caution applies in this case.

To gauge the scale of the reported exposure, readers can reference live Bitcoin market data on CoinGecko or CoinMarketCap's Bitcoin page, while keeping in mind that the cited coin count itself remains unverified.

What to Watch Next

The recommended course of action is monitoring rather than reaction. Key developments to watch for include a formal statement from Coldcard or Coinkite, a confirmed transaction trail, and any revision to the reported estimate. Assigning a cause or proposing a remedy before those elements materialize would exceed what the current evidence supports.

As custody tools and the broader infrastructure across cryptocurrency and AI ecosystems grow more complex, verifying claims at the source becomes an essential discipline for anyone holding self-custodied Bitcoin.

This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always conduct your own research before making decisions.