Coldcard hacker wallet posts OP_RETURN “pleas” as $36M BTC graffiti
A Coldcard hacker wallet has effectively become a public message board on Bitcoin. The attacker-controlled address (bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r) reportedly holds about $36 million in stolen BTC and has received multiple deposits since the theft started on July 30.
Several senders attach permanent text using Bitcoin’s OP_RETURN function, creating an on-chain graffiti wall. The notes range from victims pleading “You stole, please return some,” to opportunistic messages. At least one sender offers to launder the stolen BTC for a 10% cut, including a Telegram handle.
Blockchain researchers (including Galaxy Research) and on-chain tracker Arkham Intelligence have identified/observed the pattern. Additional messages include requests such as “Please Please Please,” a demand for “80% of my 5 BTC,” and unrelated “fund-raising” pitches that appear to use the hacker wallet’s attention.
This matters for traders because it highlights how OP_RETURN can permanently timestamp claims and narratives directly into transaction history. In the short term, it may increase attention and speculation around the Coldcard hack and related funds. Over the longer term, the same on-chain messaging can provide analysts with clues about wallet behavior, counterparties, and potential attempted cash-outs—similar to how OP_RETURN messages were used during past theft negotiations (e.g., the 2020 LuBian mining pool incident).
Neutral
This is primarily an on-chain narrative and evidence story, not a direct protocol or macro catalyst. The Coldcard hacker wallet’s $36M BTC balance and the arrival of multiple deposits increase transparency and may intensify short-term speculation, but there’s no clear, immediate signal that large BTC is being dumped or that markets face a new, measurable supply shock.
Historically, OP_RETURN “messages to thieves” (such as during the 2020 LuBian mining pool theft) mostly affected analyst tracking and community attention more than they changed BTC price direction. In the short run, traders may react to heightened headlines and activity around the address. In the long run, the behavior pattern—if it shows consolidation, movement to exchanges, or attempted laundering—could matter for risk management. For now, the impact on market stability is likely limited, hence neutral.