Legal ‘Dusting’ and Security Fears Stir $40M From Decade-Old Bitcoin Wallets

A burst of activity from long-silent Bitcoin wallets points to something other than price driving behavior: pressure. Over a 10-day window from Aug. 16 to Aug. 26, Galaxy Research logged six wallets—dormant since 2011, 2012, and 2014—moving a combined 553.59 BTC worth $40.15 million. Two of those wallets carry tags tied to a New York lawsuit that has been “dusting” old addresses to claim them as abandoned. Another plausible nudge: the late-July Coldcard firmware exploit and the broader hardware-wallet scare that followed.

What moved, and when: - Aug. 16: 8.54 BTC that had been untouched since June 13, 2011—15.1 years—moved in block 962,770 at 18:42 UTC. Estimated entry price near $14 per coin; the transfer value was $538,000 (+461,981%). No on-chain attribution. - Aug. 18: 212 BTC exited a wallet idle since Aug. 10, 2012 (14.0 years), now worth $13.66 million—roughly a +557,640% return on a ~$12 basis—tagged “Noah Doe #1396 · Salomon Client Dusted.” - Hours later on Aug. 18: 10.74 BTC left a June 17, 2011 wallet, worth $692,000. No labels attached. - Aug. 22: 150 BTC moved from a Dec. 26, 2014 wallet, valued at $11.75 million, labeled “Noah Doe #1680” (+23,701%). - Aug. 22 (block 963,519): 132.31 BTC, worth $10.37 million, departed across three 2011-era addresses. Galaxy’s breakouts: “1EG5DvjR” $4.45M (+629,068%), “1928FWqd” $404k (+625,826%), and “1EBzWeno” $5.51M (+807,639%)—roughly $10 cost basis. - Aug. 26 (block 964,127 at 10:54 UTC): 40 BTC moved for the first time since May 28, 2012 (14.2 years) to Boerse Stuttgart Digital, a German crypto custody bank. With an estimated ~$5 basis, the gain pencils to +1,535,911%.

None of the other five destinations are linked to exchanges. They may be fresh cold storage or one hop away from liquidity.

The throughline worth focusing on is the legal “dusting” campaign and how it collides with Bitcoin’s UTXO model, privacy, and the psychology of long-term keyholders. In the New York Supreme Court case, a pseudonymous plaintiff, “Noah Doe,” seeks to have 39,069 inactive addresses declared abandoned under a lost-property statute. To “serve” notice, thousands of wallets reportedly received tiny dust transactions embedding an on-chain message—what Galaxy labels “Salomon-dusted.” A judge paused a default judgment in early June, yet flagged addresses have been waking up with some regularity since.

Dust seems trivial in value, but it is heavy in consequence. Spend patterns that include dust can deanonymize history through heuristic clustering. Long-time holders know this, which is why some will either consolidate with coin control tools or move funds outright to reset their threat model. The lawsuit reframes inactivity as risk: if silence can be construed—fairly or not—as abandonment, demonstrating control becomes prudent. That single incentive can be enough to pry open an old hard drive, rotate keys, or onboard to a regulated custodian like Boerse Stuttgart Digital.

Security anxiety likely compounded the effect. In the days around the Coldcard firmware exploit that siphoned roughly $130 million starting in late July, about 233,000 BTC exited long-term holder wallets as owners of Coldcard, Ledger, and Trezor devices adjusted setups—even when their specific coins weren’t directly endangered. One incident can reset perceived safety across entire cohorts, especially for those who secured coins a decade ago with tooling and processes that feel brittle today.

This is not a one-off. Galaxy’s tracking shows a two-year trend of older UTXOs re-entering circulation that has quickened over the last six months. Earlier in August, a January 2014 wallet swept 26.96 BTC after 12.5 years. The cadence matters: when legal dusting and security incidents hit within weeks of each other, OG holders face a clean decision—prove liveness and upgrade custody, or accept growing legal and operational ambiguity.

The market impact from 553.59 BTC is negligible, but the signal is clear. External catalysts—court tactics and hardware scares—are now material drivers of on-chain behavior for some of Bitcoin’s longest-dated supply. The “why” behind these moves is rarely verifiable, yet the pattern is consistent: legal pressure and security hygiene, not price alone, are waking up forgotten keys.