Coldcard Losses Hit $88.6M

The day the Coldcard advisory broke, 11,163 more bitcoin moved onto exchanges than left them. River, a bitcoin-only custodian, took 3,679 of those coins. Set that against the theft itself, now at 1,367 BTC across three waves, and the reaction is eight times the size of the crime. Whatever this flow is, it's the bigger event.

There are two ways to read it. The dark one says people who bought a device precisely to avoid trusting anyone are handing their coins back to the custodians they meant to escape. The plain one says this is triage. The flaw is public, which means anyone can re-derive the weak keys — the third wave already shows the method spreading to smaller wallets, with patterns built to be harder to trace, and Galaxy can't even say whether it's the same operator. Owners are in a race with everyone who read the disclosure. A custodial account is the one door that's certainly not weak-seeded and it opens in minutes; new hardware ships in days. That River tops the inflow list leans this way — it's where self-custody people park in an emergency, not where they surrender.

Day one looks identical either way. The difference shows up in round trips. Watch the outflows over the next month: coins leaving exchanges for fresh wallets means the immune system worked — panic, patch, redistribute. Coins staying pooled means custody quietly won a cohort of the most committed self-custody users bitcoin had. That second outcome should worry a long-term holder more than the $88 million, because of what this whole episode actually taught: the damage came from thousands of wallets sharing one hidden point of trust. Pooled exchange custody is that same structure at a hundred times the scale. Fleeing the small version of the risk into the large version isn't safety, it's the same bet with better customer service. Even CZ, the most famous custodian this industry ever produced, drew the same conclusion this week: split your funds, because nothing is 100%. When the exchange man says don't keep it all with the exchange man, believe him.