$BTC-USD

$327M Bitcoin Stolen in a Week as Hackers Target Coldcard Wallets and Liquid Network Used by Exchanges

Two crypto security incidents resulted in $327.7M in Bitcoin thefts. Hackers exploited Coldcard wallets and the Liquid Network, moving 97.09 BTC and 4,000 BTC respectively. Galaxy Research detailed the Coldcard attacks, while Liquid Network confirmed disruptions. The incidents have impacted market sentiment, with liquidations surging 83% to $370.9M.

Original reporting
Published Sep 7, 2026, 7:15 PM UTC
Analysis
alphai AI DeskAI-generated
Added to alphai Sep 7, 2026, 7:28 PM UTC. Informational, not investment advice.
How this was made
alphai summarizes source reporting and applies a structured AI analysis for relevance, timing, sentiment and ticker impact. Always verify material claims with the original publisher.
$327M Bitcoin Stolen in a Week as Hackers Target Coldcard Wallets and Liquid Network Used by Exchanges — source image
Decision brief

The 30-second read

$BTC-USDBearishMed
01

Why it matters

The incidents expose vulnerabilities in hardware wallet randomness and settlement layer security, likely prompting tighter security audits and short‑term market sell‑offs.

02

Market read

The thefts represent a significant security event in the crypto ecosystem, potentially driving short‑term price declines and prompting risk reassessment across exchanges and wallet providers.

03

What to watch

Potential insurance claims or rapid remediation by exchanges could limit long‑term price impact.

Relevance 7/10Novelty 8/10Timing: this week

Background

The article details a series of coordinated attacks on Coldcard hardware wallets and the Liquid Network federation wallet, resulting in the theft of over $327M in Bitcoin.

Company-level read

Ticker impact

$BTC-USDBearishHigh confidence
Context

Large-scale theft of $327M in Bitcoin from Coldcard wallets and the Liquid Network federation wallet reported for the first time.

Expected impact

Potential dip of 3‑5% in BTC price over the next few days as traders react to the theft.

Evidence & confidence

The theft involves 4,000+ BTC and multiple high‑profile exchanges, creating immediate market anxiety.

Market effects

Increased scrutiny on hardware wallet providers and settlement layer solutions like Liquid Network.

Global crypto markets may see heightened volatility, especially in regions with high exchange concentration.

The breach affects major exchanges worldwide, potentially influencing overall crypto market risk appetite.

Counterpoint

Some traders may view the dip as a buying opportunity if they believe the breach will be contained quickly.

Key entities

  • Coldcard

    Manufacturer of the compromised hardware wallets.

  • Liquid Network

    Federation wallet used by over 80 exchanges, targeted for a large BTC withdrawal.

Related articles

$BTC-USDLowAI 8/10

Malone Lam Faces Plea Hearing Over $245M Bitcoin Theft - Decrypt

Malone Lam, 22, faces a plea hearing in Washington for his role in a $245M Bitcoin theft from a Washington investor. Prosecutors allege a racketeering group, called the Social Engineering Enterprise, used social engineering tactics and home burglaries to steal crypto. The group is accused of spending millions on luxury items and nightclubs. Ten of the 18 charged have pleaded guilty.

$BTC-USDMed

Bitcoin ETFs attract nearly $1 billion in a week

U.S.-listed spot crypto ETFs saw $1.24 billion in inflows from Aug. 31 to Sep. 4, with Bitcoin ETFs receiving $986.85 million. BlackRock's IBIT led with $691.51 million. Total net assets in Bitcoin ETFs reached $101.25 billion, or 6.33% of Bitcoin's market cap. Ethereum ETFs also had inflows of $218.41 million, though trading volume declined across both Bitcoin and Ethereum ETFs.

$BTC-USDMedAI 8/10

Bitcoin network used by exchanges hit by $320 million exploit.

Liquid Network, a settlement layer used by exchanges, halted transactions after a security exploit resulted in the loss of $320 million in bitcoin. The network, overseen by a federation of 80+ entities, stated that federation members are working to resolve the issue. The alleged hacker claims to be a 'white hat' and offers to return funds once the vulnerability is fixed.