Galaxy loss estimate reporting
theblock-galaxy-total
- Organisation
- The Block
- Evidence role
- Reporting
- Published
- 2026-07-31
- Source changes
- 0
- Detected differences
- 9
- Unreviewed
- 0
- Copies held
- 10
Galaxy Research figures: 1,196 addresses, 1,082.65 BTC, 41-minute window.
Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked .
Also held inside a captured conversation
This post is held twice: here, with this project's own note on why it matters, and again as part of the conversation captured at , which is polled for changes. Both copies are the same post; neither is a separate event.
Public privacy boundary
Snapshot and diff bodies for this chain monitor are held in the local evidence archive but withheld from the public site because they can contain the addresses of people who published nothing themselves. Capture times and reviewed change summaries remain available below.
Held captures
-
The earlier capture held only the Cloudflare security-verification challenge; the new capture obtained the article text and site chrome.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 69 lines
-www.theblock.co -Performing security verification - -This website uses a security service to protect against malicious bots. This page is displayed while the website verifies you are not a bot. - -Ray ID: a2733a897815fdc7 -Performance and Security by Cloudflare -Privacy +Discover the institutional crypto exchange LMAX Digital through high-level info and live data here. +✕ +Institutional crypto intel +Explore +Try it free +News +Data +Research +Prices +Learn +Treasuries +Ratings +Elections Hub +NEW +<live-market-ticker-region> +Latest Crypto News +SEC keeps Nasdaq bitcoin options on hold after granting CME review +Aug 02, 2026, 5:25PM EDT • Regulation +Saylor hints at Strategy bitcoin buy after five-week pause as STRC rate stays at 12%: 'Bitcoin Drive engaged' +Aug 02, 2026, 2:10PM EDT • Business +Trump Media says $165 million bitcoin transfer to Crypto.com wasn't a sale +Aug 02, 2026, 11:16AM EDT • Business +Iran-linked exchange sent $676 million to Binance wallets in alleged sanctions-evasion operation: Reuters +Aug 01, 2026, 5:18PM EDT • Regulation +See More Latest Crypto News +Bitcoin losses linked to Coldcard vulnerability grow to $70 million, Galaxy Research says +By RT Watson +Ecosystems•July 31, 2026, 4:20PM EDT +UPDATED: July 31, 2026, 4:28PM EDT +Make us preferred on Google +Share +<span class="acf-media-credit"><span class="acf-credit"><span class="acf-credit"><a href="theblock.co" target="_blank">The Block</a></span></span></span> +Partner offers +The Block may earn a commission if you use our partner offers, at no extra cost to you. +Quick Take +The firm said nearly 1,200 addresses were drained of more than 1,000 BTC, worth about $70 million in transactions it linked to a vulnerability affecting Coldcard hardware wallets. +We'd love your feedback. +Take a 30-second survey to help improve The Block. +Start Survey +Advertisement +Galaxy Research said Friday that nearly 1,200 addresses were drained of more than 1,000 BTC, worth about $70 million in transactions it linked to a vulnerability affecting Coldcard hardware wallets. +On Thursday, Coinkite advised that there was an ongoing issue affecting seeds generated on Coldcard Mk3 devices. "Out of an abundance of caution, Coinkite is warning all users who generated a seed using a Mk3 on version 4.0.1 (March 2021) or any subsequent version that their funds may be at risk," the crypto hardware maker said. +Coinkite later expanded the advisory to include certain Mk4, Mk5 and Coldcard Q firmware versions, and released emergency firmware updates for all affected models. +Coinkite CEO Rodolfo Novak, known as NVK, apologized Friday and said the company took "full accountability for the firmware bug," acknowledging that its review process had failed to catch it. +Novak also suggested the vulnerability may have been uncovered using artificial intelligence, calling the incident "a sober reality of the new AI paradigm." He warned that AI-assisted code review can identify latent bugs faster than even experienced security experts, allowing attackers to exploit weaknesses in publicly available code. +Galaxy Research then published its findings on social media. +"We mapped the flow of funds for the Coldcard vulnerability based on the pattern identified by engineers at Block and shared by [Clay Garrett]: 1,196 addresses drained in full for 1,082.65 BTC (~$70.2M) between 01:10:20 and 01:51:26 UTC July 30." +Coinkite's advisory followed multiple online reports of bitcoin being drained from users' Coldcard wallets. +"The nature of the vulnerability means that future attacks are possible on any Coldcard-generated address and those do not need to match this pattern," Galaxy Research also said Friday. "The pattern tells us these were all the same attacker — it does not capture the attack itself, which looks the same as if a coin owner chose to move coins." +Coinkite has said users should update their firmware and generate a new seed. They should also test the new wallet with a small transaction before transferring all of their funds and keep the old backup until the transaction is complete. +Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures. +© 2026 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice. +RATINGS +Best crypto cards with token rewards in 2026 +See more ratings +SPONSORED +Bitget Launchpool adds AEON (AEON) with 1.1M in Token Rewards +July 30, 2026, 9:18AM EDT +© 2026 the block. all rights reserved. +Privacy Policy • Terms of Service • Cookie Settings • Security +Do Not Sell or Share My Personal InformationExtracted text as captured
Discover the institutional crypto exchange LMAX Digital through high-level info and live data here. ✕ Institutional crypto intel Explore Try it free News Data Research Prices Learn Treasuries Ratings Elections Hub NEW Live BTCUSD$63,090.00-0.57% ETHUSD$1,863.46-0.99% SOLUSD$72.84-1.02% PYTHUSD$0.0391-1.26% LINKUSD$8.31-0.22% Latest Crypto News SEC keeps Nasdaq bitcoin options on hold after granting CME review Aug 02, 2026, 5:25PM EDT • Regulation Saylor hints at Strategy bitcoin buy after five-week pause as STRC rate stays at 12%: 'Bitcoin Drive engaged' Aug 02, 2026, 2:10PM EDT • Business Trump Media says $165 million bitcoin transfer to Crypto.com wasn't a sale Aug 02, 2026, 11:16AM EDT • Business Iran-linked exchange sent $676 million to Binance wallets in alleged sanctions-evasion operation: Reuters Aug 01, 2026, 5:18PM EDT • Regulation See More Latest Crypto News Bitcoin losses linked to Coldcard vulnerability grow to $70 million, Galaxy Research says By RT Watson Ecosystems•July 31, 2026, 4:20PM EDT UPDATED: July 31, 2026, 4:28PM EDT Make us preferred on Google Share <span class="acf-media-credit"><span class="acf-credit"><span class="acf-credit"><a href="theblock.co" target="_blank">The Block</a></span></span></span> Partner offers The Block may earn a commission if you use our partner offers, at no extra cost to you. Quick TakeExcerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 0 lines
Extracted text as captured
Discover the institutional crypto exchange LMAX Digital through high-level info and live data here. ✕ Institutional crypto intel Explore Try it free News Data Research Prices Learn Treasuries Ratings Elections Hub NEW Live BTCUSD$62,930.000.06% ETHUSD$1,864.840.21% SOLUSD$72.89-0.04% PYTHUSD$0.04011.26% LINKUSD$8.160.48% Latest Crypto News Former Rep. George Santos agrees to pay $35,000 in CFTC settlement over Kalshi SOTU bet Jul 31, 2026, 4:25PM EDT • Regulation Coinbase's Q2 miss sparks split on Wall Street, analysts debate growth beyond crypto trading Jul 31, 2026, 3:34PM EDT • Business Tether’s excess reserves fall by more than $4 billion amid weaker Q2 financial results Jul 31, 2026, 1:58PM EDT • Business Analysts back Strategy's cash buildup as Saylor shifts from '100% bitcoin' approach Jul 31, 2026, 1:40PM EDT • Markets See More Latest Crypto News Bitcoin losses linked to Coldcard vulnerability grow to $70 million, Galaxy Research says By RT Watson Ecosystems•July 31, 2026, 4:20PM EDT UPDATED: July 31, 2026, 4:28PM EDT Make us preferred on Google Share <span class="acf-media-credit"><span class="acf-credit"><span class="acf-credit"><a href="theblock.co" target="_blank">The Block</a></span></span></span> Partner offers The Block may earn a commission if you use our partner offers, at no extra cost to you. Quick TakeExcerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
8 presentation-noise differences. Sidebar, ticker and other page chrome churn that our review classified as not being changes to what the source says.
- +8 -67 The capture received a Cloudflare security-verification interstitial instead of the article body. No incident article text changed.
- +9 -8 Only the site chrome's rotating Latest Crypto News rail changed to a fresh set of unrelated headlines. The Galaxy article text was unchanged.
- +1 -1 Only the rotating Latest Crypto News rail changed: an unrelated Reuters headline about an Iran-linked exchange gained the word wallets. The Galaxy article text was unchanged.
- +4 -4 Only the site chrome's rotating latest-news list changed; the incident article text, including its Galaxy total, was unchanged.
- +2 -2 Only the site chrome's rotating latest-news list changed; the incident article text was unchanged.
- +1 -6 The live market-ticker region was temporarily unavailable; the incident article text was unchanged.
- +4 -4 Only live cryptocurrency ticker values in the site navigation changed.
- +5 -5 Only live cryptocurrency ticker values in the site navigation changed.
How to check this yourself
The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.
Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.
How to check this yourself
Compare the screenshot or a quotation against the original while it is available.