An attacker linked to the third wave of Coldcard-related Bitcoin thefts has moved 45% of the stolen coins, according to information reported by Cointelegraph. The movement adds to scrutiny of funds taken in attacks involving the crypto hardware-wallet brand. Galaxy’s broader assessment found that 82% of Bitcoin stolen across all Coldcard attacks remains in the original wallet addresses. The remaining 18% has been moved in what Galaxy described as apparent laundering activity. The figures distinguish the activity tied to the third-wave attacker from the overall Coldcard theft picture, where most of the stolen Bitcoin has not moved from its initial addresses. The report did not provide further details on the value or destination of the transferred coins.
