Galaxy has put the losses from the Coldcard wallet hack at roughly 1,789 BTC, while noting that the large majority of the stolen bitcoin has not moved since the theft, a detail that shapes how investigators and holders read the incident.
The estimate comes from research published by Galaxy’s research team, which framed the Coldcard hack losses in bitcoin terms rather than a single fixed dollar figure. This article focuses narrowly on that reported loss total and the current status of the funds, both of which are the strongest verifiable points in the story. For related coverage, see Bitcoin ETFs Post $338M in Inflows, Extending Streak to Six Days.
The total loss figure of 1,789 BTC is Galaxy’s estimate, not a confirmed on-chain reconciliation, and it should be read with that attribution attached. Treating it as an estimate matters because loss tallies in active security cases can be revised as more affected addresses are identified. For related coverage, see US targets Iran's crypto sector, cites over $100M in oil-linked payments.
Why the unmoved share is the key update
The detail advancing the story is that about 87% of the affected bitcoin remains unmoved, according to Galaxy’s tracking of the funds. That share is a status marker on where the stolen coins sit now, not a prediction about whether they will ever be recovered or cashed out. For related coverage, see Fed Experiment Shows How Bitcoin Rallies Attract New Crypto Buyers.
There is a distinction worth keeping clear: the loss estimate measures how much bitcoin was exposed, while the unmoved figure measures how much of it has stayed put. A high unmoved percentage can suggest the attacker has not yet laundered or liquidated most of the holdings, though it offers no guarantee about future movement.
For readers weighing both sides, the unmoved balance can be read as a window for tracing and potential intervention, or, more cautiously, simply as coins an attacker has chosen not to touch yet. Galaxy’s data supports the observation itself; it does not settle which interpretation proves correct.
What it means for the Coldcard case and Bitcoin holders watching it
The case is notable to Bitcoin users because it pairs a bitcoin-denominated loss total with a live view of fund movement, giving a rare combined picture of scale and status. That combination is why the incident sits alongside other closely watched security and enforcement stories, from recent moves to harden bridge security to criminal cases over crypto fraud.
The restrained takeaway is what the evidence supports and no more: Galaxy estimates the loss at the reported total, and it reports that most of that bitcoin has not moved. Whether the unmoved share shrinks or holds will determine how much of the story is still to be written.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
