Image Credit: Shutterstock
Key Takeaways
- A wallet holding 500 BTC untouched since 2013 moved its full balance, worth about $31.3 million.
- The transfer coincides with a spike in old-coin movement following the Coldcard hardware wallet hack, which has drained roughly $130 million so far.
- Analysts say the timing suggests dormant holders may be relocating funds over security concerns, though motives can’t be confirmed from blockchain data alone.
A Bitcoin wallet that had sat untouched since 2013 moved 500 BTC on Monday, worth roughly $31.3 million at current prices. The transfer coincides with a broader spike in old-coin activity following the Coldcard hardware wallet hack that began July 30.
The wallet, labeled 18TExP, held coins worth about $500,000 when they last moved 12.7 years ago. On-chain tracker Whale Alert first flagged the transaction in an X post. Separate on-chain data show a wider pattern of long-dormant Bitcoin becoming active in the same window, though the reasons behind any single transfer cannot be confirmed from blockchain data alone.
The 500 BTC Transfer
Wallet 18TExP sent its entire balance of 500 BTC to a new address in a single transaction Monday. The coins had not moved since 2013, when they were worth a fraction of their current value.
Coins moving between wallets does not, by itself, reveal the holder’s motive. It confirms only that whoever controls the private key chose to act after more than a decade of inactivity.
The timing coincides with an active security incident affecting Coldcard, a Bitcoin-only hardware wallet. Blockchain analytics firm Lookonchain, in an X post, said the wallet owner may have relocated the funds due to security concerns tied to the Coldcard exploit.
Old Coins Are Moving Across The Network
On-chain analytics platform CryptoQuant tracks Bitcoin transfers by how long each coin sat dormant before being spent, a measure known as spent output age bands. That data shows a clear increase in old-coin movement around the same period as the 18TExP transfer.
Coins dormant for 10 years or longer saw about 935 BTC move on Aug. 3, the largest single-day total for that age band since March 20. Coins dormant for five to seven years saw a larger spike, with roughly 6,388 BTC moving on July 31. Both figures sit well above typical daily activity for coins that old, based on the CryptoQuant data.
The Coldcard Hack Behind The Timing
Attackers have been draining Bitcoin from Coldcard-generated wallets since July 30, exploiting a flaw researchers trace back to March 2021. Coldcard is a hardware wallet marketed for Bitcoin-only cold storage.
Researchers at Galaxy estimate the total damage from the exploit at approximately $130 million in BTC so far. Coldcard has not confirmed a fix for the underlying flaw. The exploit’s multi-year dormancy before being used adds to the difficulty of assessing how many wallets remain exposed.
Old-Coin Transfers Cluster Around Disclosure
Dormant coins move for reasons unrelated to any single security event. Estate transfers, exchange consolidations and custodial migrations can all trigger old wallets to become active, and CryptoQuant’s data does not attribute individual transactions to specific causes.
Multiple large, long-dormant transfers occurred within days of the Coldcard disclosure, though CryptoQuant has not attributed the movements to a common cause. Bitcoin traded near $62,562 at time of writing, up about 1% on the day.
Self-Custody Confidence In Focus
The Coldcard exploit has renewed scrutiny of hardware wallet security more broadly. Holders who generated keys on affected devices face uncertainty over whether their setups remain safe.
That uncertainty may help explain why coins with no prior connection to the hack, such as the 18TExP wallet, are also moving, though the exact motive remains unconfirmed. A holder need not have used a Coldcard device to decide a decade-old private key warrants a fresh address. Whether the pattern continues will depend on how quickly Coldcard addresses the underlying flaw and how holders respond to further disclosures about the scope of affected wallets.
