A wallet cluster that had not moved a single satoshi since Bitcoin’s earliest days woke up on September 5, 2026. Twelve addresses holding mining rewards from March 2010 sent a combined 600 BTC into two new wallets, ending roughly 16 years of total inactivity. Cointelegraph, Bitcoin.com News, CryptoRank, and several other outlets confirmed the transfer within hours, and blockchain forensics firm Whale Alert stepped in to answer the question every crypto trader asks the moment old coins move: is this Satoshi Nakamoto?
The short answer, according to Whale Alert’s own research, is no. But the 600 BTC event still matters, and not just because of the roughly $48 million price tag attached to it. It’s a case study in how blockchain analytics has evolved, how dormant Bitcoin supply gets tracked in real time, and why coins mined in Bitcoin’s infancy carry a different kind of scrutiny than anything moved today.
What Happened: 600 BTC Moves After 16 Years of Dormancy
The transfer involved 12 distinct addresses, each holding a 50 BTC block reward from the coinbase-subsidy era of 2010, when miners earned 50 BTC per block instead of today’s fractional reward. Bitcoin.com News reported that the outbound transfers confirmed across block heights 965639 through 965646, moving the full 600 BTC out of wallets that had sat untouched since they were mined. Lookonchain’s on-chain feed flagged the same movement within minutes, describing it as 12 Bitcoin addresses dormant for over 16 years that moved a combined 600 BTC on September 5.
CryptoRank dated the same event to September 6, a discrepancy that most likely comes down to time zone rounding around the UTC transaction timestamp rather than two separate events. Either way, the coins landed in the same place: two new Native SegWit addresses, according to CryptoRank’s analysis, rather than a known exchange deposit wallet. That detail turned out to be the most important one in the whole story.
The Numbers Behind the September 5-6 Transfer
Outlets landed on slightly different dollar figures depending on the exact minute they filed, since Bitcoin’s price moves constantly. Bitcoin.com News put the value at $47.84 million, CryptoRank cited approximately $47.7 million, and Cointelegraph, Lookonchain, and a KuCoin news flash all rounded to roughly $48 million. Averaging those figures back out puts the implied Bitcoin price at the time of the transfer somewhere between $79,500 and $80,000 per coin.
| Outlet | Reported Value | Reported Date | Key Detail |
|---|---|---|---|
| Cointelegraph | ~$48 million | Sept 5, 2026 | 12 addresses, 600 BTC combined |
| Bitcoin.com News | $47.84 million | Sept 5, 2026 | Blocks 965639-965646, 12 transfers |
| CryptoRank | ~$47.7 million | Sept 6, 2026 | Coins moved to 2 Native SegWit addresses |
| Lookonchain | ~$48 million | Sept 5, 2026 | 12 addresses dormant 16+ years |
| KuCoin news flash | ~$48 million | Sept 5, 2026 | Sourced to Whale Alert analysis |
| Coinotag | ~$28 million (initial), revised to ~$48 million | Sept 5-6, 2026 | First flagged 350 BTC across 7 wallets, later expanded to full 600 BTC / 12 blocks |
| Forklog | ~$48 million | Sept 5-6, 2026 | Miner-era origin confirmed by Whale Alert |
The Coinotag detail is worth pausing on. Its first report caught only part of the movement (350 BTC across 7 wallets) before follow-up analysis connected the remaining transfers and confirmed the full 600 BTC across 12 March 2010 block rewards. That’s a small window into how these stories actually get built in real time: automated alerts fire on individual transactions first, and human or algorithmic correlation stitches the full picture together minutes or hours later.
Where the Bitcoin Came From: 12 Blocks Mined in March 2010
Every one of the 12 source addresses held exactly 50 BTC, the fixed block subsidy paid to miners before Bitcoin’s first halving in November 2012. That reward size, combined with a mining date of March 2010, places these coins firmly in Bitcoin’s earliest operational period. At that point the network had only a small number of active miners, no meaningful market price, and no exchanges in the modern sense. Bitcoin.com News flagged this as “genuine Satoshi-era” supply, mined before the coin ever had an established market price.
That’s exactly why any movement out of this era draws attention. Wallets from 2009 through roughly 2011 are the pool of addresses most closely associated with Bitcoin’s earliest miners, a group that reportedly includes Satoshi Nakamoto and a handful of other early participants. When any of that supply moves, speculation about the network’s pseudonymous creator follows almost automatically.
Whale Alert’s Verdict: No Link to Satoshi Nakamoto
Whale Alert, the blockchain transaction-tracking service that first flagged and analyzed the 12 blocks, published its conclusion the same day: none of the blocks can be connected to Satoshi Nakamoto based on its research. Cointelegraph, Forklog, and Lookonchain all cited the same finding, framing it as a direct rebuttal to the wave of speculation that predictably follows any large, old-wallet transaction on Bitcoin’s network.
Forklog reported that Whale Alert’s analysts verified the origin of all 12 rewards individually and found no connection to Bitcoin’s creator. That distinction matters because it shows Whale Alert didn’t just look at the wallet cluster as a single blob. It traced each of the 12 blocks back to its own mining-reward origin before ruling out a Satoshi link across the entire set.
How Analysts Rule Identities In or Out
Bitcoin’s ledger is permanent and public, which means every transaction since block zero is available for anyone to inspect. Firms like Whale Alert build on that transparency by clustering addresses based on spending patterns, mining timestamps, and known heuristics from Bitcoin’s early history. Researchers have spent years studying the mining signatures left behind by Bitcoin’s first miners in an attempt to isolate which blocks might belong to Satoshi Nakamoto specifically, as opposed to other early adopters running mining software on ordinary desktop CPUs. The 12 blocks behind this transfer didn’t match those established Satoshi-associated signatures, which is the technical basis for Whale Alert’s public conclusion.
Why AI-Assisted On-Chain Analytics Now Do This Work
A decade ago, tracing a wallet cluster back through 16 years of blockchain history and cross-referencing it against known mining patterns was slow, manual work done by a small number of specialist researchers. Today, blockchain analytics platforms lean on automated clustering and pattern-recognition models to do the first pass in minutes rather than weeks. That shift is part of a broader trend across the AI and machine-learning sector, where firms increasingly fold machine-learning-assisted heuristics into wallet-clustering and anomaly-detection pipelines rather than relying purely on manual heuristics.
That’s the practical reason a story like this one moves as fast as it does. Lookonchain’s feed and Whale Alert’s public analysis both went live within hours of the on-chain transfer, not days. Automated monitoring catches the transaction the moment it confirms, and pattern-matching systems handle the initial “is this address linked to X” screening that used to require a researcher manually pulling up years of transaction history by hand.
Market Reaction: Consolidation, Not a Sell-Off
Despite the size of the transfer, none of the reporting on this event points to a sharp price reaction tied directly to the 600 BTC movement. CryptoRank’s analysis is the most specific on this point: the coins were consolidated into two Native SegWit addresses rather than sent to a known exchange deposit wallet, which the firm interpreted as more consistent with a custody upgrade or security migration than an imminent sale. CryptoRank noted that a follow-up transfer to an exchange would be the signal worth watching, not the initial move itself.
That framing lines up with how whale-watching communities generally read dormant-wallet activity. Moving coins into a modern address format is often about upgrading wallet security or consolidating holdings under better custody practices, especially for coins that have sat untouched since before SegWit itself existed as a Bitcoin feature. A sale requires a second, separate transaction to a liquid venue, and as of the reporting reviewed here, no outlet had confirmed that step happened.
Historical Context: Bitcoin’s Recurring Dormant-Wallet Problem
Bitcoin’s earliest years produced millions of coins that have simply never moved again, whether because the private keys were lost, the holder passed away without leaving access instructions, or the coins are being held deliberately as a long-term store of value. Every so often, a piece of that dormant supply reactivates, and each time it does, the same cycle repeats: an automated alert fires, speculation about Satoshi spikes on social media, and an analytics firm publishes a rebuttal within hours.
What makes the September 2026 event notable within that recurring pattern is scale and precision. Rather than a single wallet waking up, this was a coordinated set of 12 separate addresses, all mined in the same month, moving in the same batch of transactions. That level of coordination is unusual enough that multiple outlets treated it as a distinct, named event rather than routine whale-watching noise.
Comparing Bitcoin Whale Events: What Triggers Each Type
Not every large Bitcoin movement means the same thing, and conflating them is a common mistake among newer market watchers. The table below breaks down how a dormant-wallet reactivation like this one differs from other headline-grabbing whale events in how they typically play out.
| Event Type | Typical Trigger | Usual Market Signal | 2026 Example |
|---|---|---|---|
| Dormant wallet reactivation | Key holder moves old coins to new address | Ambiguous, often custody-related rather than a sale | 600 BTC from 12 March 2010 blocks |
| Exchange hack or breach | Attacker drains hot wallet | Immediate sell pressure as funds get laundered | Liquid Network sidechain hack, $320 million drained |
| Miner reward consolidation | Mining pool batches payouts | Routine, low market impact | Ongoing across major pools |
| Exchange inflow spike | Holder deposits to a trading venue | Often precedes a sale | Watched closely after any dormant-wallet move |
| Cold storage withdrawal | Holder moves funds off an exchange | Generally read as bullish long-term signal | Common pattern during hardware-wallet security pushes |
The dormant-wallet category sits in its own bucket precisely because there’s no reliable way to know intent from the transaction alone. A move to a new Native SegWit address, as CryptoRank pointed out in this case, tells you the holder is doing something deliberate with their keys. It doesn’t tell you whether that something is a security upgrade, an estate transfer, or the first step toward a sale.
The Security Angle: Why Old Address Formats Draw Extra Scrutiny
Coins mined in 2010 were typically secured with older address formats and, in some cases, exposed public keys directly on-chain the first time they were ever spent. That detail is part of why security researchers pay close attention when Satoshi-era coins move. Exposing a public key, even briefly, is one of the scenarios cryptographers point to when discussing long-term cryptographic risk to Bitcoin’s signature scheme, separate from the routine hash-based mining security that protects the rest of the network. NIST finalized its post-quantum cryptography standards specifically because assets that expose public keys on aging elliptic-curve signatures represent a theoretical future attack surface, even though no practical break of Bitcoin’s signature scheme exists today.
None of the reporting on this specific 600 BTC transfer suggests any signature or key compromise occurred. The relevance here is more about why old-era Bitcoin holdings get treated as a distinct security category by researchers, not a claim that this particular transfer was unsafe.
How to Track a Dormant Wallet Yourself
Because Bitcoin’s ledger is public, anyone can verify a transaction like this one directly rather than relying on a headline. Public block explorers expose a free API that returns the balance and transaction history for any address. A simple request against a free public explorer like mempool.space looks like this:
curl -s "https://mempool.space/api/address/<bitcoin_address>" | python3 -m json.toolSwapping in a specific address returns its current balance, confirmed transaction count, and total funds received and sent over its lifetime, which is exactly how independent researchers cross-check claims made by any single analytics firm, Whale Alert included. It’s a useful habit for anyone following whale-watching news, and it pairs well with setting up your own crypto wallet alerts so a specific address pings you the moment it moves, rather than waiting on a headline.
Why This Story Spreads Every Time It Happens
Part of what makes dormant-wallet stories reliably go viral is Bitcoin’s own scarcity narrative. Every early coin that resurfaces is a reminder that a meaningful share of Bitcoin’s 21 million maximum supply, trackable in real time on trackers like CoinMarketCap, may be permanently unreachable, which in turn makes the coins that do move feel unusually significant. Add the mystery of Bitcoin’s pseudonymous creator, who has not made a verified on-chain move since roughly 2010, and any transaction from that era becomes a story almost by default, regardless of the actual dollar value involved.
The 600 BTC figure here happens to land in a size range large enough to matter financially (roughly $48 million) while still being small compared to Bitcoin’s daily trading volume, which runs into the tens of billions of dollars on most exchanges. That combination, meaningful but not market-moving, is exactly why outlets can cover it thoroughly without needing to report a price crash to justify the story.
Market Impact: What Traders Should Actually Watch
For traders and analysts, the practical takeaway isn’t the initial move, it’s what happens next. CryptoRank flagged the two new Native SegWit addresses as the thing to monitor going forward. If either address sends funds to a known exchange deposit wallet, that’s the point where dormant-supply chatter typically turns into actual price-impact analysis, since a sale of 600 BTC at current prices would represent a meaningful, if not overwhelming, addition to available sell-side liquidity.
Until that happens, the most accurate read on this event is the one multiple outlets converged on independently: a security-motivated consolidation of old coins into a modern wallet format, confirmed by Whale Alert to have no connection to Satoshi Nakamoto, with no exchange deposit yet observed.
Predictions: What Happens to the 600 BTC Next
- If either of the two new addresses sends funds toward a known exchange wallet, expect a fresh wave of headlines within hours, driven by the same automated-alert pipeline that caught the original move.
- Speculation about Satoshi Nakamoto will resurface the next time any pre-2011 wallet reactivates, regardless of how conclusively this particular case was ruled out, because the pattern-matching process has to run fresh each time.
- Blockchain analytics firms will likely lean further into automated, pattern-recognition-driven wallet clustering as the volume of dormant-coin reactivations grows, since manual tracing doesn’t scale to the pace these stories move at.
- Expect continued attention on how much of Bitcoin’s early supply sits in address formats considered weaker by post-quantum cryptography researchers, especially now that NIST’s post-quantum cryptography standards are finalized and the topic has mainstream visibility.
- Coverage of dormant-wallet events will keep separating “moved” from “sold” more carefully, following CryptoRank’s consolidation-versus-sale framing, as more outlets adopt the same on-chain-first analytical approach.
The Bigger Picture for Bitcoin’s Dormant Supply
Stories like this one are a reminder that Bitcoin’s supply isn’t static in the way people sometimes assume. Coins mined 16 years ago, under completely different network conditions and at a fraction of today’s difficulty, remain just as spendable today as the day they were mined, provided the private key still exists. That permanence is a feature of the design, not a bug, and it’s exactly what makes every reactivation of old supply worth watching closely, verifying independently, and reporting carefully rather than jumping straight to the most dramatic explanation available.
Frequently Asked Questions
Did Satoshi Nakamoto move 600 BTC?
No. Whale Alert’s research concluded that none of the 12 blocks behind this transfer can be connected to Satoshi Nakamoto, a finding echoed by Cointelegraph, Forklog, and Lookonchain in their coverage of the event.
How much was the 600 BTC worth?
Estimates ranged from roughly $47.7 million to $48 million, depending on the exact minute each outlet calculated the value against Bitcoin’s live price.
When exactly did the transfer happen?
Reports place it on September 5 or September 6, 2026, with Bitcoin.com News citing confirmation across block heights 965639 through 965646.
Where did the 600 BTC originally come from?
The coins came from 12 separate mining-reward blocks from March 2010, each holding the 50 BTC subsidy that miners received before Bitcoin’s first halving in 2012.
Did the coins get sold?
Not according to available reporting. CryptoRank noted the coins moved into two Native SegWit addresses rather than a known exchange deposit wallet, which analysts read as a custody or security move rather than a sale.
Who is Whale Alert?
Whale Alert is a blockchain transaction-tracking service that monitors large cryptocurrency movements across multiple networks and publishes real-time alerts, including the analysis behind this event.
Why do old Bitcoin wallets get so much attention when they move?
Coins from Bitcoin’s 2009-2011 mining era are closely associated with the network’s earliest participants, including its pseudonymous creator, so any movement from that period draws outsized speculation regardless of the amount involved.
Can I verify this transfer myself?
Yes. Bitcoin’s blockchain is public, and free block explorer APIs like mempool.space let anyone look up an address’s balance and transaction history directly, without relying on any single outlet’s report.
