Galaxy Research raised its estimate of losses from the Coldcard hardware-wallet exploit to 1,789.28 BTC across 8,865 addresses, worth about $114.7 million when stolen and about $138.8 million at the current prices cited by Alex Thorn, the firm’s head of firmwide research. The updated figure, posted by Thorn on X on Monday, August 24, 2026, compares with Galaxy’s earlier estimate of 1,778.84 BTC from more than 8,600 addresses. The affected wallets were largely long-dormant, with median dormancy of 3.2 years and average dormancy of 3.6 years. Galaxy has received 221 victim reports involving 790.72 BTC, or about 44.2% of the identified total; those cases had median and average losses of 1.04272 BTC and 3.57792 BTC, respectively. The confirmed tally excludes medium-confidence cases that could lift losses to about 1,824 BTC, or roughly $140 million at the time of the thefts. The thefts began July 30 after a March 2021 Coldcard firmware change weakened seed-generation randomness, allowing attackers to derive candidate keys without physical access to devices. Most stolen funds remain unmoved, and Galaxy said it found no confirmed attacker activity after Aug. 6. TRM Labs separately estimated losses at roughly 1,816 BTC, highlighting that attribution remains subject to further investigation.