Coldcard hacker’s $36 million bitcoin (BTC) wallet becomes a graffiti wall of pleas and hustles

That’s because the ability to write messages is tied to a quirky Bitcoin feature called OP_RETURN, which lets anyone attach a small text string to a transaction. The text gets permanently timestamped into the blockchain alongside the transfer of money. The function exists for technical purposes; mainly, developers use it to timestamp documents or embed small proofs. That said, users can use the function to leave personal notes.

The Coldcard hardware wallet exploit, first detected on July 30, has snowballed into a major self-custody breach, with confirmed losses now topping $100 million.

What people are actually writing

The plea that opened this article isn’t the only one. Several similar messages have surfaced, according to on-chain tracker Arkham Intelligence.

One reads “Please Please Please” alongside an address; another bluntly asks for “80% of my 5 BTC” back. Whether these come from genuine hack victims or opportunists capitalizing on the sympathy wave is difficult to verify.

Other messages are opportunistic rather than sympathetic.

One reads, “I clean btc, do kyc and cashout. I take 10%,” complete with a Telegram handle — a laundering pitch hoping to land the hacker as a client. Another begs, “1 BTC for my Bitcoin journey,” which is entirely unrelated to the hack. The sender seems to be using the hacker wallet’s spotlight to solicit money from strangers.