Bitcoin active addresses hit roughly 0.98 million a day on July 31, marking the highest daily count since December 2024 after attackers swept wallets with seeds from defective Coldcard firmware 🖤.
Glassnode shared the data on August 6 and labeled the jump “fear-driven on-chain activity.” The analytics firm added that “holders migrating seeds and moving funds to alternative custody reflects an operational security response, not a change in market conviction.”
Following the Coldcard firmware exploit, the number of active Bitcoin addresses surged to 0.98M/day, the highest since December 2024.
This is fear-driven on-chain activity. Holders migrating seeds and moving funds to alternative custody reflects an operational security response,… pic.twitter.com/BoKql7UpDH
— glassnode (@glassnode) August 6, 2026
Exchange Balances Rise By 22,135 BTC 🌑
Coin Metrics logged 967,546 active addresses that day, 54% above the July average of 627,061. The last higher reading came in at 985,635 on December 10, 2024. Bitcoin held on exchanges climbed from 2,654,863 on July 29 to 2,676,998 on August 3, adding 22,135 coins or 0.83%. The balance dipped to 2,667,058 by August 5, leaving roughly 12,200 of those coins on exchanges. Transaction counts moved lower instead. The network handled 607,581 transactions on July 31, under the July average of 656,321, while active addresses sat 54% above their monthly mean. Coin Metrics recorded 730,433 active addresses on August 5, about 16% over the July average and the seventh straight day above it 🕷️.
Losses Top 100 Million In The Sweep 🦇
Coinkite revealed that seeds made on Mk2 and Mk3 firmware version 4.0.1 from March 2021 through version 4.1.9 carried weakened randomness. Seeds on Mk4, Mk5, and Q devices before the patched releases hold about 72 bits of entropy against the 128 bits intended. Fixed firmware arrived as version 4.2.0 for Mk2 and Mk3, 5.6.0 for Mk4 and Mk5, plus 1.5.0Q for Q. Seeds built with at least 50 fair independent private dice rolls pulled enough entropy from the dice alone while a strong unique BIP-39 passphrase forces attackers to crack that too 🔪. A passphrase fails to repair the affected seed so users must migrate anyway since the patch leaves existing seeds untouched. The opening sweep pulled 594.5 BTC across 1,324 UTXOs from about 500 single-signature addresses in four consecutive blocks on July 30. Median loss per victim was 0.41 BTC with the largest single hit at 29.9 BTC. Galaxy Research tallies 1,596 BTC confirmed stolen from about 7,300 addresses rising to 2,055 BTC once suspected sweeps join the count. The confirmed haul crossed 100 million last week. Santiment tracked 0.58 bullish comments for every bearish one across social channels, the lowest positive-to-negative ratio since tracking began 💀. Coinkite urged every owner who generated a seed on affected firmware to shift funds to a new seed on patched hardware. Bitcoin traded at 64,606 on August 6 🌙.
Just another echo from the void by iconofsin.eth 💖
