Coldcard incident and transferring to another wallet: is this a taxable event?
4 Aug
4 Aug
Disclaimer: The content provided in this blog post is for informational purposes only and does not consider your personal financial circumstances. Please conduct your own research and consult with a qualified financial advisor before making any investment decisions. The volatile nature of the cryptocurrency market carries inherent risks, and individual circumstances may vary.
If you're moving crypto after the Coldcard firmware vulnerability, here's what you need to know about Australian tax
The Coldcard firmware vulnerability that emerged late July 2026 has left many Bitcoin holders scrambling to move their funds to safety. Whether you're an individual holder, a trustee of a family or investment trust, a company holding crypto on the balance sheet, or an SMSF trustee, you probably have the same tax question: is this move a taxable event?
The short answer: it depends. Here's what actually matters, and we've flagged the extra layer SMSFs need to think about along the way.
Moving funds between wallets held by the same owner is generally not a taxable event
Here's the good news. If you're simply transferring cryptocurrency from one wallet to another wallet held by the same legal owner, that transfer alone is not a taxable event in Australia.
This means your own wallet to another wallet in your own name, your trust's wallet to another wallet in the trust's name, your company's wallet to another wallet in the company's name, or your SMSF's wallet to another wallet in the SMSF's name. Moving Bitcoin from a compromised Coldcard to a new hardware wallet or to an exchange, within the same ownership entity, doesn't trigger capital gains tax. You're not selling the crypto. You're not converting it to AUD. You're just moving it to a different location. That's not a taxable disposal under Australian law.
This is different from moving crypto between entities, for example from your own name into your SMSF, your trust, or your company. That's a change of legal ownership, not an internal transfer, and it needs to be looked at separately as it can trigger a taxable disposal or, for an SMSF, contribution rules. This article only deals with transfers within the same ownership entity.
Even though the transfer itself isn't taxable, you need to record it. Your records should show:
This documentation matters for anyone holding crypto, but it carries extra weight for SMSFs. Your SMSF auditor needs to see that you properly tracked your holdings through the transfer. If you can't show the chain of custody from old wallet to new wallet, it creates questions about whether the crypto is actually owned by your SMSF. For individuals, trusts and companies, good records simply make life easier at tax time and protect you if the ATO ever asks questions about your cost base or ownership.
If some of your crypto was actually stolen before you could move it, that's different. Depending on your circumstances, you may have a capital loss.
If attackers drained part of your holdings from the Coldcard wallet, the loss you can potentially claim is generally the cost base of the crypto that was stolen, not its market value at the time of the theft. Since the proceeds from a theft are nil, the capital loss is essentially what you originally paid for the crypto that's gone (in AUD terms at the time you acquired it), for the portion actually stolen. This is a capital loss that you, your trust, your company, or your SMSF may be able to claim against other capital gains, subject to your specific facts.
You'd need to evidence this with blockchain data showing the drain, police reports etc. The ATO (and, for SMSFs, your auditor) will want to see proof that the funds were actually stolen, not just moved by you. Blockchain explorer records showing transfers to unknown addresses will establish this.
For tax purposes, the loss occurs on the date the theft happened (late July 2026 based on current reports early August 2026), not the date you discovered it or moved your remaining funds. That date falls in the 2026-27 financial year.
This matters because if you have capital gains elsewhere in the 2026-27 financial year, whether that's in your personal name, your trust, your company, or your SMSF, you can offset the Coldcard loss against those gains. If you don't have enough capital gains to absorb it this year, the loss can be carried forward to offset gains in future years.
First, document what you're doing. Take screenshots showing the old wallet address, transfer date, and amount. Save blockchain records and police reports of any theft. Your accountant will need these when preparing your tax return, whether that's an individual return, a trust or company return, or an SMSF return.
Second, get your new setup sorted quickly. Move to a secure wallet, whether that's a new hardware wallet, a regulated exchange with proper custody, or a crypto platform that supports the entity type you're using. Document the new location.
Third, talk to your accountant before you make changes. If significant amounts were stolen, you'll want to discuss how to claim the loss properly. If you're moving large amounts, coordinate the documentation.
The Coldcard incident is a good reminder that transferring between wallets held by the same owner is tax neutral, but everything else around it matters. Theft may give rise to a capital loss. Moving through an exchange might trigger fees that aren't directly taxable but affect your cost base.
The rule is simple, whatever structure holds the crypto: if you're not converting to fiat, changing legal ownership, or realising a gain, there's generally no tax. But document everything anyway. If you're an SMSF trustee, your auditor will want to see that you tracked your holdings carefully through any transition.
If you’re intrigued by the notion of investing in cryptocurrencies via SMSF but find yourself overwhelmed by the initial steps, Consensus Layer is here to assist you. As a team of seasoned crypto tax and accounting specialists, we are well-versed in navigating the complex landscape of crypto investments. Let us be your trusted guide in ensuring compliance with superannuation and tax laws. We pride ourselves on delivering exceptional client service while championing the growth of the crypto industry.
Investing in cryptocurrencies through SMSF offers an exciting opportunity for crypto enthusiasts who firmly believe in the long-term potential of digital assets. However, it’s crucial to grasp the risks involved and the compliance requirements before embarking on this journey. Seek professional advice, choose an Australian crypto exchange that caters to SMSFs, and if you need expert assistance, reach out to our SMSF Specialist Advisor, David Fam at Consensus Layer, on 07 3569 3701 or email him at david@consensuslayer.com.au. Together, we’ll navigate the intricate world of crypto taxes and accounting to help you unlock the full potential of your superannuation!
We send tailored updates straight from our team of specialists to your inbox.