FBI May Have Identified Coldcard Hacker Behind 1,082 BTC Theft

Investigation Links Theft to Data Account

Researchers investigating the Coldcard hardware wallet compromise connected the first wave of thefts—1,082.65 BTC—to a paid data provider's internal logs, according to reporting by Bitcoin Magazine. The matching of transaction patterns to account activity occurred with what the investigation describes as "extraordinary specificity," implying a narrow set of suspects with access to both the victim keys and the provider's systems.

FBI Status Unclear

While the specificity of the trace suggests law enforcement involvement or awareness, the FBI has not publicly confirmed identifying or charging anyone in connection with the theft, according to Crypto.news. The 1,082.65 BTC remain stationary on-chain, indicating the attacker has not attempted to move or sell the coins since the initial sweep. The lack of movement and the investigative precision point to an active, ongoing probe rather than a resolved case.

Why It Matters

For Traders

Unmoved stolen coins pose no immediate liquidity threat, but any future movement or exchange listing could trigger volatility in affected token or asset classes.