The Coldcard vulnerability incident involved 8,865 addresses and losses of 1,789.28 BTC, according to monitoring by Galaxy’s head of research. The stolen bitcoin was worth $114.7 million when taken and is currently valued at $138.8 million. On an address basis, the median loss was 0.00152 BTC and the average was 0.20184 BTC; the median dormancy period was 3.2 years and the average was 3.6 years. Across 221 victim reports, the median loss was 1.04272 BTC and the average was 3.57792 BTC, while median and average dormancy periods were 3.25 years and 2.99 years, respectively. Reported victims accounted for 790.72 BTC, or 44.2% of the total loss. Including medium-confidence losses that have not yet been confirmed would raise the total to 1,824 BTC, worth $140 million based on prices when the losses occurred.