The numbers are stark: 2.27 million new Bitcoin wallets created, according to Santiment’s latest on-chain report. The timing is no coincidence. This surge coincides with growing concerns over Coldcard, the hardware wallet brand long revered by security purists. But when you strip away the headline, the real story is far more nuanced.
Santiment’s data captures a clear spike in address creation, but the methodology behind the count remains opaque. Are these fresh self-custody wallets, or are they empty shell addresses spawned by dusting attacks, exchange sweeps, or airdrop farmers? Without a breakdown of address balances or transaction histories, the 2.27 million figure is a signal, not a conclusion.
Coldcard, built by Canadian firm Coinkite, has built a cult following for its extreme security—air-gapped signing, BIP39 passphrase support, and rigorous privacy. Yet the “custody concerns” referenced in the report remain unspecified. Is it a firmware vulnerability? A supply chain attack? Or simply FUD following a routine security advisory? The lack of detail means the market is pricing in uncertainty, not evidence.
Historically, hardware wallet security incidents—like the 2020 Ledger data leak—triggered short-term self-custody migration but rarely altered the long-term trajectory of Bitcoin holdings. The real question is not whether wallets are created, but whether they hold real value.
The Core Tear Down: Why 2.27M Wallets May Not Mean 2.27M Users
Let’s examine the numbers. Bitcoin’s address creation rate is volatile. During the 2021 bull run, new addresses surged to over 1 million per day, many of which were zero-balance addresses used for BTC routing or change. The current 2.27M over a reporting period—likely weeks—is notable but not unprecedented.
A deeper problem: Santiment’s definition of a “new wallet” typically refers to a previously unseen address receiving its first transaction. This includes addresses created by exchanges for internal consolidation, payment processors, and even multisig setups. The actual number of unique, self-custodied private keys is likely a fraction of the headline.
Cross-reference with exchange reserve data would clarify the picture. If Bitcoin is flowing out of exchanges at an accelerated rate, the wallet creation is likely organic. But as of this writing, no major exchange has reported a spike in BTC withdrawals. The Glassnode exchange net flow metric remains flat, suggesting the new wallets are not absorbing significant supply.
Moreover, the self-custody thesis is challenged by the rise of Bitcoin ETFs. Institutional investors now hold BTC through regulated funds, reducing the need for direct self-custody. The new wallets may be retail—but retail that is still learning, or worse, falling for phishing scams.
The Contrarian Angle: What the Bulls Got Right
To be fair, the self-custody narrative is structurally sound. Post-FTX, the market learned the hard way that “not your keys, not your coins.” Every security scare reinforces that lesson. If Coldcard’s concerns are eventually proven minor, the event may still accelerate the shift toward multi-signature setups and MPC wallets—a net positive for the ecosystem.
Additionally, address creation often precedes price appreciation. In 2020, a similar wallet surge preceded Bitcoin’s run to $69k. The difference: that surge was accompanied by rising transaction counts and active addresses. Today, active address metrics are flat. The 2.27M new wallets may be a lagging indicator of fear, not a leading indicator of demand.
Another counterpoint: Coldcard’s hardcore user base is highly technical. They are less likely to panic-sell or move funds to inferior solutions. The “concern” may actually be a stress test that strengthens the ecosystem by weeding out weak links in the hardware supply chain.
Takeaway: Verify Before You Believe
The 2.27M wallet number is a data point, not a verdict. The market’s real test lies in the weeks ahead: do exchange reserves drop? Do active addresses rise? Does Coldcard release a clear vulnerability disclosure?
Hype burns hot; logic survives the cold burn. Until the underlying data is verified, treat this as a signal of heightened self-custody awareness, not a confirmation of a new bull wave. The security of Bitcoin’s network is excellent; the security of the data used to interpret it is not.