Coldcard Fallout Shows Up On-Chain as 210,000 Bitcoin Leaves Long-Term Holder Wallets

Roughly 210,000 BTC have moved out of long-term holder (LTH) wallets over the past week, marking the largest such decline since December 2024, when bitcoin first approached $100,000. The movement coincides with the Coldcard security breach and appears to reflect a broad shift in custody practices rather than conventional selling.

Coldcard, manufactured by Canada-based Coinkite, is one of the most widely used bitcoin-only hardware wallets, favored by self-custody advocates for its air-gapped design and open-source firmware. The breach therefore carries weight beyond its direct losses, as it tests confidence in hardware wallets as a category — a cornerstone of bitcoin's self-custody ethos.

According to Glassnode data, long-term holder supply has dropped from just under 15 million BTC — near an all-time high — to approximately 14.7 million BTC. Glassnode classifies long-term holders as entities whose coins have remained dormant for roughly 155 days, or just over five months. This cohort is frequently described as the market's "smart money" because its members typically hold through short-term volatility.

Historically, heavy spending by long-term holders has aligned with periods of market strength or price peaks. Similar distribution waves occurred around the market tops of March 2021, March 2024, and December 2024, as seasoned holders took profits amid rising demand.

The current movement, however, is unfolding near market lows. Bitcoin is trading around $64,000, roughly 50% below its October all-time high. This suggests the outflows are not profit-taking but rather a migration in how bitcoin is being stored in the wake of the Coldcard incident. Notably, bitcoin did not make new lows following the hack.

The Coldcard Breach

The breach originated from weak randomness in affected Coldcard firmware, which enabled attackers to reconstruct some users' wallet recovery phrases and drain their bitcoin. Thousands of addresses were affected, with estimated losses reaching as much as $114 million.

Coldcard subsequently urged affected users to generate new wallets and move their funds, noting that updating firmware alone cannot secure keys that may already be compromised, according to CoinDesk.

Custody Migration Underway

Some of the decline in long-term holder supply likely reflects users transferring bitcoin into newly generated wallets with stronger security arrangements. Other holders may be moving assets to regulated custodians or spot bitcoin ETFs as they reassess the risks of self-custody. Analysts have previously noted that the Coldcard exploit could accelerate demand for regulated bitcoin exposure.

ETF flows appear to offer some support. U.S. spot bitcoin ETFs attracted approximately $754 million over the past week, with BlackRock's iShares Bitcoin Trust (IBIT) accounting for the majority of those inflows, CoinDesk reported.

Key Distinction

The crucial takeaway is that on-chain movement does not necessarily equate to selling. In this instance, the decline in long-term holder supply may be capturing a broader migration in bitcoin custody practices rather than a straightforward loss of conviction among experienced holders. Whether this migration proves temporary or signals a durable reallocation toward institutional custody solutions will be visible in coming weeks through continued LTH supply tracking and ETF flow data.