CryptoQuant confirmed 1,432 BTC in losses tied to a firmware vulnerability in Coldcard hardware wallets, while Galaxy Research and TRM Labs estimate the total could reach 1,730–1,816 BTC drained from over 5,200 addresses across multiple waves since late July.
Matters because: The exploit renewed institutional preference for regulated custody over self-custody, and further victim disclosures could push the confirmed loss total higher.