"You stole, please return some." Coldcard hacker's wallet becomes a graffiti wall of pleas and hustles

Victims of a major Coldcard hardware wallet hack are using the Bitcoin blockchain's OP_RETURN feature to send messages and pleas for the return of their stolen funds. The wallet, which holds approximately $36 million in stolen assets, has become a public forum for victims, opportunists, and money launderers.
Why it matters
This incident illustrates the unique, immutable nature of blockchain transactions and how they can be repurposed for non-financial communication in the wake of high-profile cybercrimes.
That's one of several messages now sitting permanently on the Bitcoin blockchain, addressed to the wallet tied to the Coldcard hacker, which currently holds funds worth roughly $36 million. Each message arrives with a real, if tiny, payment attached.
The wallet in question is “ bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r. ” It has been identified by blockchain researchers, including those at Galaxy Research, as one of the attacker-controlled addresses tied to the theft.
The address has taken in several deposits since the Coldcard theft began on July 30, with many of those transactions carrying written messages. Most are pleas to return the stolen money; others are performative, and at least one offers services to launder the stolen BTC.
This is as much a story about how the Bitcoin blockchain functions as it is about hack victims paying to convey their sentiments to the person who took their money.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in