A 12-year-old bitcoin wallet holding 500 BTC moved all its funds on Monday, marking the first transaction since 2013. According to reports from Whale Alert, the wallet labeled 18TExP transferred 500 BTC worth $31.3 million to a new wallet. The coins were worth approximately $500,000 when they last moved 12.7 years ago, representing a significant increase in value over the decade-long dormancy period. Despite the security concerns surrounding hardware wallets, Bitcoin prices rose to over $64,000 on August 3, gaining about 2.9% as reported by multiple sources, suggesting broader market resilience. However, as reported by AMBCrypto, most of those coins moved to a new address, reducing concerns about immediate exchange selling, though the destination alone does not prove self-custody or security-related migration.
The timing of this movement coincides with the largest hardware wallet exploit in crypto history, involving a five-year firmware flaw in Coldcard wallets that drained 1,816 BTC worth approximately $116 million across more than 5,200 addresses. As reported by Galaxy Research, the attack unfolded in four distinct waves: Wave one hit on July 30 at approximately 2:14 a.m. UTC, sweeping 594 BTC from roughly 500 addresses in 25 minutes. Wave two followed within 48 hours, lifting the cumulative total to 1,082 BTC from 1,196 addresses. Wave three brought the confirmed total to 1,367 BTC from 4,585 addresses, worth approximately $89 million. A suspected fourth wave ran throughout August 4, sweeping roughly 449 BTC from 709 addresses, potentially bringing total losses to 2,055 BTC worth close to $130 million. The vulnerability stemmed from a build configuration error in Coldcard firmware version 4.0.1, shipped in March 2021, that routed seed generation to a deterministic software pseudorandom number generator instead of the device's STM32 hardware random number generator, reducing effective entropy from 128 bits to approximately 40 bits on Mk3 devices and 72 bits on Mk4, Mk5, and Q models.
The 500 BTC movement is part of a broader wave of dormant coin activity that coincides with a significant shift in Bitcoin's self-custody landscape. According to CryptoQuant data tracking spent output age bands, coins dormant for 10 years or longer saw roughly 935 BTC move on August 3, the largest single-day total since March 20. Additionally, coins dormant for five to seven years saw a much larger spike, with roughly 6,388 BTC moving on July 31. However, the most striking development is the net transfer of bitcoin from self-custody wallets to exchange addresses has been positive every day since July 31, reversing a two-year outflow trend that began after the FTX collapse. OKX reported record exchange inflows in the days following the exploit, with Bitcoin ETF inflows reaching $211.5 million on August 5, led by BlackRock's IBIT and Fidelity's FBTC. This behavioral shift is concentrated among single-signature wallets holding between 0.5 and 10 BTC, the range most likely to represent individual holders who used a single Coldcard as their primary storage, while multisignature wallets and institutional custodians have shown no comparable movement.
The security concerns have impacted broader market confidence, with some analysts pointing to increased inflows of BTC onto exchanges as the hack dented confidence in self-custody safety. Despite the hack affecting major cryptocurrency holders, Bitcoin's resilience to the $116 million Coldcard hack suggests underlying market strength, as reported by multiple sources. The reactivation of dormant Bitcoin wallets carries greater context when combined with broader on-chain data, as Long-Term Holder Supply remained stable and exchange reserves also remain near 2.7 million BTC, while entity-adjusted inflows have stayed subdued. According to AMBCrypto, sustained monitoring of exchange inflows, address reuse, and post-transfer activity will ultimately determine whether security concerns or broader market factors drove these dormant whale movements. The movements suggest cautious wallet management rather than broad distribution, though future changes in long-term holder supply and exchange reserves will determine whether these transfers reflect precautionary security measures or the beginning of broader liquidity shifts.
