Coldcard-linked Bitcoin thefts may have reached 2,055 BTC, worth approximately $132 million at current prices, as multiple attackers race to drain wallets generated with vulnerable firmware. Galaxy Research has high confidence that three major waves and 14 smaller incidents removed 1,596 BTC from roughly 7,300 addresses. A suspected fourth wave would lift the total to 2,055 BTC across more than 7,700 addresses, although Galaxy has not received enough victim reports to classify that group with the same confidence.