Coldcard Hackers Move Stolen Funds Through Crypto Mixers

A security firm called CertiK has observed early signs of laundering tied to the ongoing Coldcard hardware wallet exploit. According to CertiK, around $4.17 million worth of Bitcoin and $380,000 in Ether have been sent to crypto mixing services.

The 64 BTC were transferred from a source address to Wasabi on Tuesday, while the 200 ETH was moved to Tornado Cash on Wednesday, according to CertiK's X updates and address-level data. Mixing services pool funds and obscure transaction linkages, making it harder for investigators to recover stolen assets.

CertiK suggests that there may be multiple attackers exploiting the vulnerability, with a smaller party possibly being the initial exploiter. The behavior is consistent with broader incident reporting that describes multiple parties attempting to monetize the same underlying weakness.