TechFlame News, citing a post from Galaxy Research, confirmed that as of now, approximately 1,719 BTC worth around $111 million have been stolen in the Coldcard hardware wallet vulnerability attack, with several other transactions still under verification. Total losses are expected to potentially exceed $130 million, and if the pending transactions are ultimately confirmed, the scale of theft could surpass 2,300 BTC. Additionally, collaborating researchers have received reports from over 250 victims, and based on the losses from the first three waves, the victims are largely ordinary Bitcoin holders rather than whales. Galaxy Research stated that they are currently tracking more than 25 distinct attack patterns, including the first through third waves, indicating that multiple different threat actors are actively exploiting this vulnerability. All addresses associated with the stolen coins were created after the affected firmware release on March 17, 2021, and there is currently no evidence suggesting that this vulnerability impacts Coldcard Mk3, Mk4, Mk5, or Q series devices beyond the firmware released after that date, nor any other signing devices or wallets.