Coldcard Hacker Moves Half of Third Wave's $7.7M Bitcoin Haul

The attacker behind the Coldcard hardware wallet exploit has moved nearly half of the third wave's Bitcoin haul, worth around $7.7 million.

This comes after Galaxy Research reported that 97.09 BTC left the vaults on September 2 via THORChain and into CoinJoin rounds over the weekend.

The coins were used to send Ethereum, but only 20.56 BTC actually reached it, with 57.24 BTC sitting unspent as CoinJoin change in a single address.

Coldcard 'Wave 3' exploited created 293 two-of-2 multisig vaults for each victim's coins, which the attacker is working through in order of size.