COLD CARD WALLET EXPLOITED FOR 1,789 BTC – THE BIGGEST THEFT OF 2026 SENDS SHOCKWAVES THROUGH THE SECURITY COMMUNITY
$TSTBSC

‌
In what is being dubbed the most devastating crypto heist of the year, malicious actors have successfully drained 1,789 Bitcoin, valued at approximately $1.15 billion at current market prices, from what was believed to be a highly secure Coldcard hardware wallet. On-chain forensic analysts at PeckShield have traced the stolen funds and confirmed that the attackers are actively using THORChain's cross-chain swapping capabilities to convert the illicit BTC into Ethereum (ETH) in an attempt to obfuscate the transaction trail and evade centralized exchange freeze requests. This incident has raised serious questions about the security assumptions surrounding hardware wallets, particularly those that rely on partially signed Bitcoin transactions (PSBTs) and air-gapped signing mechanisms. Initial reports suggest that the attack may have been a sophisticated supply-chain compromise, where the wallet's seed generation process was tampered with before it reached the end-user. Galaxy Research, which has been closely monitoring the situation, reports that approximately 90% of the stolen Bitcoin remains untouched in the attacker's primary wallets, indicating a methodical, long-term liquidation strategy rather than a panicked dumping spree. This event serves as a stark reminder that no wallet is 100% secure, and users are strongly advised to diversify their holdings across multiple storage solutions, including multi-signature setups and institutional-grade custody services, especially when managing high-value portfolios.