COLDCARD EXPLOITER MOVES 45% OF WAVE 3 STOLEN FUNDS

Summary from the TLDR Crypto newsletter

The attacker behind the Coldcard hardware wallet exploit (a 2021 firmware bug that weakened seed randomness) has moved 45% of Wave 3 stolen bitcoin, per Galaxy Research, swapping some to ETH via THORChain, then running funds through CoinJoin. About $7.8M has been spent so far, moving stolen vaults largest-first. 82% of all exploited funds remain in attacker-controlled addresses. Total identified losses across all waves now stand around 1,806 BTC (~$143.9M), with Galaxy flagging a possible Wave 4.