Coldcard Wallet Thief Moves Millions Through CoinJoin

The attacker behind the recent wave of Coldcard wallet thefts has moved $7.8 million worth of Bitcoin through the privacy tool CoinJoin.

This represents about 45% of the funds stolen in that specific cluster of attacks, according to Galaxy Research.

The transfer occurred on September 6, following an earlier transaction on September 2 where the exploiter converted part of the haul into Ethereum via THORChain.

The attacker is working through compromised wallets in a deliberate sequence, starting with those holding the largest balances.