Coldcard Attacker Moves $7.7M in Bitcoin, Shifting 45% of Stolen Funds

TL;DR

• Coldcard Movements: Attacker shifted 97.09 BTC ($7.7 million), routing funds through THORChain and CoinJoin while working through the largest vaults.
• Coldcard Vault Structure: Galaxy said the exploiter created 293 multisignature vaults and likely added a previously unknown one, raising Wave 3 to 294 vaults and expanding the Coldcard theft’s scale.
• Coldcard Exploit Impact: About 82% of stolen Bitcoin remains in attacker-controlled addresses, while 18% has moved. The wallet flaw stemmed from weak randomness in wallet seed generation.
  

  ---

The third wave of the Coldcard theft continues to unfold as Galaxy Research tracks fresh movements from the exploiter who has begun shifting significant portions of stolen Bitcoin. The latest activity shows the attacker moving 97.09 BTC, worth $7.7 million, through THORChain and CoinJoin transactions, marking a major step in the laundering process. Coldcard remains central to the investigation, with researchers uncovering new vaults and tracing patterns that reveal how the attacker structured the operation.

… Continue reading the full article at the original source below.