Bitcoin Cold-Wallet Attack Hits 4,500 Addresses, Losses Near $89M

A sweeping cyberattack targeting Bitcoin cold-wallet holders has expanded to at least 4,500 compromised addresses, with cumulative losses approaching $89 million, according to reporting from CoinDesk. The breach marks one of the more significant cold-storage security incidents in recent memory, striking a category of wallet long considered the safest option for storing digital assets offline.

Cold wallets are hardware or paper-based storage solutions deliberately kept off the internet to shield funds from remote hackers. The fact that attackers managed to reach these supposedly air-gapped holdings suggests either a sophisticated supply-chain compromise, a social-engineering vector, or a vulnerability in the wallet generation or recovery-phrase process — though the precise attack method had not been fully disclosed at the time of reporting.

Read more Jim Cramer Praises Apple's AI Push as Stock Hits $4.9T Cap →

The scale of the operation — spanning thousands of distinct addresses — points to a coordinated, systematic campaign rather than opportunistic one-off theft. Security researchers tracking on-chain activity would likely flag the pattern of drains across unrelated wallets as evidence of a single threat actor or organized group working through a common exploit or data set.

For everyday crypto holders, the incident underscores that cold storage reduces but does not eliminate risk. Best practices such as purchasing hardware wallets directly from manufacturers, never entering seed phrases digitally, and verifying device firmware integrity remain critical lines of defense. Investors who believe their wallets may be affected are advised to move funds to a freshly generated wallet immediately and contact the relevant hardware vendor.

The full scope of the attack, including attribution and the exact compromise vector, remains under active investigation. Continue reading at CoinDesk.