Coldcard Hackers Push 64 BTC and 200 ETH Through Mixers as Losses Near $130 Million

Coldcard losses are approaching $130 million, and the first mixer transfers have begun

Monetization has started. From roughly 1,816 BTC stolen from over 5,200 addresses across four waves, the estimated damage is now closer to $130 million. The main shift is not the size of the haul anymore, but the fact that some of the stolen funds have moved into mixers.

What changed this week

64 BTC went into Wasabi, and 200 ETH landed in Tornado Cash. Those amounts are small compared with the total stolen, but they matter because once funds pass through, recovery odds drop close to zero. The story is no longer just about a large static hoard.

Why the mixers matter more than the headline total

A static pile of coins can be watched and tagged. Moving funds introduce market risk because the attackers have to convert or route them over time. For now, that remains limited: almost all of it still has not moved, and the majority of victim funds were still pooled in a small number of attacker-controlled addresses with limited mixing attempts.

Copycats could widen the problem if more stolen funds hit mixers

The immediate change is the flow, not the full scale of the loot. Once 64 BTC and 200 ETH entered mixers, the exploit became a laundering process as well as a visible theft.

Why recovery becomes harder once funds are mixed

Mixers pool coins from many users and break the public on-chain link between sender and recipient. That makes it harder for investigators and exchanges to quarantine stolen assets cleanly. The risk is not just lost coins; it is lost visibility.

Copycat activity is the main watchpoint

CertiK said "There's likely a few copycats after the initial exploit", and TRM noted multiple attackers may be involved. That should still be treated as analyst suspicion, not a settled attribution.

If more parties start moving funds, the monitoring burden gets harder. More addresses, more routes, and less coordination can make compliance responses slower and less predictable.

What matters most now

Bulls can still point to almost all of it still has not moved, which keeps most of the stolen inventory visible. Bears have a clearer mechanism now: mixers reduce traceability, and fragmented activity can blur enforcement. The key question is whether mixer transfers remain isolated or spread enough to create lasting sell pressure.