In the first 10 minutes, approximately 30 million dollars were stolen, with Coldcard vulnerability attackers prioritizing the highest value wallets

According to monitoring by Bitcoin News, Chainalysis stated that an analysis of the Coldcard exploit event involving over $38 million shows that the attackers deliberately targeted the highest value wallets, including one holding $1.8 million, indicating that the victims had been profiled before the asset transfers began. Approximately $30 million was stolen in the first 10 minutes, and then about 500 wallets were emptied within 25 minutes.

Clay Garrett from Block stated that investigators also confirmed that the attackers used a paid account from a well-known blockchain service provider to query the victims' addresses during the operation. The provider's internal logs matched the request times and order, but Block stated that no evidence was found indicating that the company knowingly assisted in the theft. Relevant information has been shared with the authorities.