Bitcoin ETF Inflows Rise After Coldcard Hack: Bloomberg ETF Analyst
Bloomberg senior ETF analyst Eric Balchunas said US spot Bitcoin ETFs have seen inflows every trading day since a Coldcard wallet exploit, totaling about $620 million. He cited BlackRock’s IBIT, Fidelity’s FBTC, Bitwise’s BITB, ARK 21Shares’ ARKB and Defiance’s MSBT. TRM Labs estimated the exploit drained over $116 million from 5,200+ addresses. The link to ETF demand is unclear.
How this was made
The 30-second read
Why it matters
The newest actionable datapoint is the reported daily inflow streak into multiple US spot Bitcoin ETFs totaling roughly $620 million, while the Coldcard connection remains explicitly unconfirmed.
Market read
Traders can monitor whether the reported ETF inflow streak continues as a proxy for investor preference for regulated custody after a high-profile self-custody incident.
What to watch
The article does not provide outflow data from self-custody or on-chain evidence of investor migration; it only notes speculation and a quote about statistical safety on exchanges.
Background
Coldcard is described as a hardware wallet exploit that drained over $116 million from more than 5,200 wallet addresses, renewing debate over self-custody risk versus ETF exposure.
Ticker impact
Bloomberg analyst Eric Balchunas links a week-long streak of US spot Bitcoin ETF inflows to the Coldcard wallet hack, citing IBIT daily inflows.
Near-term flows could remain bid, but direction depends on whether investors truly rotate from self-custody to ETFs.
The article provides a cumulative inflow figure and names IBIT, but explicitly says the connection to Coldcard is unclear.
The article says FBTC recorded inflows every trading day since the Coldcard weekend exploit, totaling about $620 million across named ETFs.
Potential continued inflow-driven support if the streak continues; otherwise mean reversion risk.
The newest concrete fact is the daily inflow streak and cumulative total, not a confirmed behavioral shift.
BITB is listed among ETFs with inflows every trading day since the Coldcard wallet exploit, per Bloomberg’s ETF analyst.
Short-term performance may track ongoing inflows; no guaranteed follow-through.
The article provides flow timing and totals but frames the Coldcard connection as speculative.
ARKB is named as recording daily inflows since the Coldcard hack, contributing to the roughly $620 million cumulative figure.
If inflows continue, ARKB could see sustained demand; if not, flows may fade.
The article’s data point is the inflow streak; the behavioral interpretation is explicitly uncertain.
Defiance Daily Target 2X Long MSTR ETF (MSBT) is included in the inflow list tied to the Coldcard exploit timing.
Could remain supported if the broader inflow streak persists; otherwise higher volatility risk given 2x exposure.
The article provides the inflow streak but does not explain why a 2x MSTR-linked product would be affected by Coldcard self-custody debates.
Market effects
Reinforces the narrative that regulated spot Bitcoin ETFs can attract incremental demand during self-custody security scares, even if the link is unproven.
US-listed spot Bitcoin ETF flow momentum can influence broader crypto sentiment and US crypto-adjacent liquidity.
Could affect global crypto custody and exchange-vs-self-custody debate, influencing investor positioning across jurisdictions.
Counterpoint
The inflow streak may be driven by unrelated factors (macro liquidity, ETF marketing, price action) and the Coldcard timing is coincidental.
Key entities
- analystEric Balchunas
Bloomberg senior ETF analyst who said the inflow timing relative to Coldcard is unclear but could reflect some migration over the long term.
- crypto walletColdcard
Hardware wallet exploit referenced as draining more than $116 million from 5,200+ addresses.
- blockchain intelligence firmTRM Labs
Provided the estimate of $116 million drained from 5,200+ wallet addresses.
- crypto executiveChangpeng Zhao (CZ)
Argued centralized exchange storage may be statistically safer than self-custody, citing loss data.
- crypto serviceBoltz
Suspended its non-custodial bridge due to a rise in AI-assisted exploits that outpace patching.


