Coldcard Fallout: 210,000 BTC Just Left Long-Term Holder Wallets. Here Is How to Tell Custody Rotation From Selling
Glassnode data shows the largest weekly drop in long-term holder supply since December 2024. Most headlines call it distribution. The orderflow says something more nuanced, and the difference is worth real money.
$ Stop reading delayed data. Compare live order book depth across 5 exchanges right now.
Launch Free Terminal →Roughly 210,000 BTC moved out of long-term holder wallets over the past week, the largest weekly decline Glassnode has recorded since December 2024, when bitcoin was approaching $100,000 for the first time. Back then the trigger was euphoria. This time it is fear: the Coldcard hardware wallet breach that began on July 30 has forced thousands of holders to move coins that had not budged in years.
What Actually Happened With Coldcard
Attackers exploited a flaw dating back to March 2021 in which some Coldcard devices fell back to a predictable software random number generator when creating wallets instead of using the hardware RNG. Weak entropy means an attacker can reconstruct likely seed phrases offline and derive private keys without ever touching the device. Estimated losses have climbed toward $130 million across thousands of addresses, and the vendor told users that a firmware update is not enough: any seed generated on an affected unit has to be treated as compromised, which means generating a new wallet and moving everything.
That instruction is the key to reading the on-chain data. When a security incident forces mass wallet regeneration, long-term holder supply mechanically drops even if not a single coin gets sold, because Glassnode's LTH classification counts coins dormant for roughly 155 days. Move a five-year-old UTXO to a fresh address and it exits the LTH cohort instantly.
The On-Chain Evidence Cuts Both Ways
Some of the movement is clearly defensive rotation. Long-term holder supply fell from just under 15 million BTC, near an all-time high, to about 14.7 million. The most dramatic single event came on August 3, when the wallet labeled 18TExP, dormant since 2013, moved its entire 500 BTC balance worth $31.3 million to a new address. Lookonchain assessed the transfer as security-driven. CryptoQuant's spent output age bands show coins dormant seven to ten years waking up in the same window, with roughly 935 BTC in the ten-year-plus band moving on August 3 alone.
But some of it is real selling. Daily bitcoin deposits to exchanges in transactions under 10 BTC spiked to 7,300 BTC, the highest reading since February and the fastest pace of small-holder transfers since the FTX collapse. That is the opposite of the post-FTX pattern, when coins fled exchanges toward self-custody. This time shaken holders are moving toward exchanges and custodians, and part of that flow is hitting the bid.
How to Separate Rotation From Distribution
The distinction is not academic. LTH distribution waves coincided with the market tops of March 2021, March 2024 and December 2024. If this week's 210,000 BTC were genuine profit-taking, it would be a major warning. The way to check is to stop staring at wallet flows and start watching the tape.
Custody rotation is invisible in orderflow: no aggressive selling, no CVD damage, no absorption at the bid. Distribution shows up immediately as sustained negative delta, sell imbalance in the book, and price failing to hold levels that previously attracted buyers. So far the tape leans toward rotation. Bitcoin held $64,000 through the entire episode, US spot ETFs absorbed roughly $754 million this week, and whale wallets in the 10 to 10,000 BTC band accumulated over 20,000 coins since July 29. Forced sellers into that kind of bid do not leave price flat.
The Custody Debate Is the Longer Story
The structural consequence may outlast the flows. Confidence in hardware wallets took a direct hit, and figures across the industry are openly rethinking self-custody assumptions. Expectations of growing institutional custody demand and ETF migration were already circulating within days of the breach. If a fraction of the 14.7 million LTH coins gradually migrates to regulated custody or ETF wrappers, the float available to spot markets tightens further, which is quietly bullish over quarters even while the headlines read bearish over days.
For traders, the actionable edge is monitoring which old coins hit exchanges versus which just rotate. Buildix tracks whale and smart-money wallet activity on buildix.trade/wallet and pairs it with live CVD and order book data on the deep view, so you can see within minutes whether a headline-grabbing wallet movement is actually reaching the orderbook. The free screener at buildix.trade is the place to start.
A 210,000 BTC weekly move deserves attention, but context decides its meaning. In December 2024 that number meant veterans selling a top. In August 2026 it mostly means veterans changing locks after a break-in, and the market that absorbs the residual selling without breaking $64,000 is telling you exactly how deep the real bid is.