Hacker Exploits Hardware Wallet Flaw to Launder Millions
A hacker exploited a firmware bug in Coldcard hardware wallets in 2021, stealing over $1.8 million worth of BTC. The thief laundered around 97 BTC, or $7.8 million, using THORChain and CoinJoin services.
The hack affected more than 1,789 BTC stolen across multiple waves since July 2026. While 45% of the funds have been moved through cross-chain swaps and mixing to obscure the trail, 82% remain in attacker-controlled wallets.