Stolen BTC, Public Diary: Hack Victims Pay Pennies to Yell Into the Void 🪧

A wallet holding roughly $36 million in bitcoin stolen during the Coldcard hardware wallet exploit has become an unlikely public message board, with victims and opportunists paying small amounts of $BTC to attach permanent notes to the thief's address via Bitcoin's OP_RETURN function. The exploit, first detected on July 30, has been confirmed by blockchain researchers including Galaxy Research to have snowballed into a major self-custody breach with losses now topping $100 million. The attacker-controlled address, "bc1qq85v2c926eg6pgxhwp6q7lf6cnsz80qs3fcu9r," has received several deposits since July 30, many carrying written messages embedded directly into the blockchain.

The notes range from emotional pleas to outright hustles. One message reads "You stole, please return some," while another simply states "Please Please Please" alongside a return address, and a third bluntly asks for "80% of my 5 BTC" back. At least one message, according to on-chain tracker Arkham Intelligence, offers to launder the stolen funds in exchange for a 10% cut. Whether the senders are genuine victims of the hack or third parties attempting to capitalize on the situation remains unverifiable from on-chain data alone.

The practice is possible because of OP_RETURN, a Bitcoin feature that allows users to attach a small text string to a transaction, permanently timestamped into the blockchain alongside the transfer of funds. Developers primarily use the function for technical purposes such as timestamping documents or embedding small proofs, though it has increasingly been used for personal notes. Each message therefore represents a real, albeit tiny, payment to the attacker, paid voluntarily by the sender to ensure the words are recorded immutably on the public ledger. The phenomenon turns the Coldcard hack into a case study of both self-custody risk and the unusual social dynamics enabled by transparent blockchain infrastructure.