According to CoinMeta, as reported by Bitcoin News, approximately 500 Bitcoin single-signature addresses were subject to a centralized transfer, involving around 594 BTC, with a value of about 38 million US dollars. Subsequently, the funds were consolidated into another wallet. The affected addresses all used a single-signature mechanism, with balances mainly ranging from 0.15 to 0.26 BTC. Some of the UTXO had not been active for several years. Since one of the victims used a Coldcard device, there were speculations in the market that the incident might be related to that device, but Coldcard CEO NVK denied the existence of a device-level vulnerability, stating that the user may have imported previously leaked or weaker mnemonic phrases, and pointed out that this transfer involved private keys from different wallets. Bitcoin security researcher Jameson Lopp indicated that only specific UTXO of some victims were transferred, rather than the entire wallet balance, which may imply that the attackers obtained only some of the private keys, not the complete mnemonic phrases. At present, the source of this incident has not been determined, and there is no evidence indicating the presence of a Coldcard random number vulnerability, a supply chain attack, or a Bitcoin cryptography vulnerability.