Hackers Move Millions in Stolen Crypto from Coldcard Wallet Exploit

Cybercriminals linked to a security exploit involving Coldcard, a hardware cryptocurrency wallet, have transferred 64 Bitcoin (worth approximately $4.17 million) and 200 Ethereum (worth around $380,000) into crypto mixing services. Mixers are tools that blend transactions from many users to make stolen funds harder to trace back to their source.

According to blockchain analytics firm TRM Labs, the attempts to launder the funds through mixers have so far been limited, and the bulk of the stolen cryptocurrency remains sitting in wallets controlled by the hackers. This suggests investigators and blockchain tracking firms may still have an opportunity to trace and potentially freeze some of the assets before they are fully laundered.

While this incident centres on cryptocurrency infrastructure rather than traditional business systems, it highlights a broader trend: attackers increasingly target digital wallets and financial technology, then rely on mixing services to hide their tracks. Any Australian small business dealing in cryptocurrency payments, holding digital assets, or partnering with fintech providers should be aware that stolen funds can be laundered quickly, and that hardware wallets are not immune to exploitation.