Coldcard Attackers Hoard Stolen BTC as Mixing Activity Rises
A group of attackers has exploited a firmware error in the Coldcard device, resulting in the theft of over 1,596 BTC. The largest known attacker holds 1,159 BTC across seven separate addresses, with none of it moved to an exchange or mixer.
The theft occurred quickly, with funds swept up within 41 minutes. Analysts describe the Bitcoin as 'unmoved rather than frozen,' but moving the funds carries risk for the attacker due to flagging by law enforcement and exchanges.
A separate person appears to be trying to hide their stolen Bitcoin through a mixing service. About 10 BTC has been mixed so far, with roughly 54 BTC coming back as change and then split into smaller pieces of about 7 BTC each.