Coldcard Attackers Transfer About 45% of Stolen Funds

Galaxy Research reports that the "third wave" of attackers involved in the Coldcard hardware wallet theft is still transferring funds. The attackers have created 293 2-of-2 multi-signature vaults for each victim. On September 2, the first batch of funds was transferred to Ethereum via THORChain and has recently entered the mixing process. The attackers are processing funds ranked by the amount stolen, having transferred the top 11 vaults, while the last ten untouched vaults hold a total of 30.81 BTC, and vaults ranked from 61 to 293 hold a total of 33.77 BTC. Approximately 45% of the stolen coins from the third wave have been transferred out. Additionally, 58 new addresses have been discovered that collectively spend in the same 2-of-2 multi-signature format, which may also belong to Coldcard victims, raising the total stolen amount to approximately 1806 BTC. Currently, about 82% of the stolen BTC remains in addresses controlled by the attackers, while about 18% has been transferred.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.