CRYPTO
Coldcard Hacker Moves $7.7M, Nearly Half of Third-Wave Bitcoin Haul
DecryptMonday, September 7, 2026 at 11:09 AM
RedScroll Brief

The attacker built 293 separate vaults for the stolen Bitcoin and is emptying them in order of size, largest first.
RedScroll Signal
- Impact
- High
- Category
- Crypto
- Market relevance
- High
- Why it matters
- Crypto moves are a live stress test of liquidity, regulation, and narrative risk. The attacker built 293 separate vaults for the stolen Bitcoin and is emptying them in order of size, largest first. Watch liquidity and volatility around Bitcoin and Coldcard Hacker Moves — crypto markets reprice narrative risk quickly.
Desk copy
RedScroll Briefing
Extractive editorial brief — not a reprint of the original
What happened
The attacker built 293 separate vaults for the stolen Bitcoin and is emptying them in order of size, largest first.
Why it matters
Crypto moves are a live stress test of liquidity, regulation, and narrative risk.
Background
Decrypt reported on this under crypto. RedScroll surfaces the signal with an extractive brief — not a reprint of the original article. Read the source for full reporting.
Timeline
Decrypt published: Coldcard Hacker Moves $7.7M, Nearly Half of Third-Wave Bitcoin Haul
Story is in today’s RedScroll edition. Follow the original source for updates.
Economic impact
Watch liquidity and volatility around Bitcoin and Coldcard Hacker Moves — crypto markets reprice narrative risk quickly.
More on
Related stories
- Coldcard third-wave attacker moves 45% of stolen Bitcoin
CointelegraphCRYPTO
- Timing the bitcoin market is exciting but nearly impossible. Here's why
CoinDeskCRYPTO
- Satoshi-era Bitcoin wakes after 16 years of dormancy as 600 BTC moves
CointelegraphCRYPTO
- Bitcoin blinks less than gold when Treasury yields move
CoinDeskCRYPTO
- Better and Coinbase’s bitcoin-backed mortgages can reuse borrowers’ collateral
CoinDeskCRYPTO
- Why crypto experts say buying and holding bitcoin easily beats trying to time the market
CoinDeskCRYPTO
Source
Decrypt
Original reporting by Decrypt. RedScroll provides an extractive briefing only.