COLDCARD Hack Funds Move On-Chain for First Time via THORChain

A third-wave attacker in the COLDCARD cryptocurrency hardware wallet exploit has moved stolen Bitcoin on-chain for the first time, swapping a portion of it for Ethereum through THORChain.

This marks the first time that funds stolen across the first, second, and third waves of attacks have moved from the attacker's original addresses.

Around 90% of the third-wave stolen funds remain unmoved as of now. The attacker has reportedly encountered obstacles during swaps on THORChain, including some transactions being refunded, but continues to repeatedly attempt to swap the remaining funds.