Coldcard's money theft investigation is progressing. The first wave of assailants has been captured by the FBI

According to Bitcoin Magazine, progress was made in the investigation into the theft of the hardware wallet of Coldcard in July 2026. Some 10,8265 BTCs (approximately $118 million) remained in the attackers ' addresses in the first wave of attacks. The investigation found that the attackers had used a payment account from a block-link data service, that the internal logs were highly consistent with the currency theft pattern and that the relevant leads had been forwarded to law enforcement authorities. According to Alex Thorn, Galaxy Research analyst, the identity of the first wave of assailants may have been captured by law enforcement authorities. In total, some 2,000 BTCs were stolen from the subsequent waves, of which approximately 76 were operating in a similar pattern to the first wave, possibly the same perpetrator。