Skip to content
Back to Guavy Wire
Crypto

THORChain Used to Swap Stolen Coldcard Bitcoin for Ether

Instruments
BTC ETH RUNE
Share

A hacker linked to recent Coldcard wallet thefts has started exchanging stolen Bitcoin for Ether via the THORChain platform.

According to Galaxy head of research Alex Thorn, the third-wave exploiter transferred about 10% of the stolen funds through THORChain, with the remaining 90% still untouched.

'The hacker appears to be having some issues swapping all the funds through THORChain, they keep getting refunded and he keeps retrying,' Thorn said.

The transfer marks the first time that funds from any of the three waves have moved onchain from the original hacker addresses. Onchain analysts traced the funds through THORChain to a new Ethereum address, which Thorn shared with relevant authorities and crypto companies.

More on Crypto

Disclaimer: Guavy is a data and market intelligence provider, not an investment adviser. The information, signals, and market analysis provided by the Guavy API and related services are for informational purposes only and are not intended as financial advice, investment recommendations, or an endorsement of any particular trading strategy. Trading in volatile markets, including cryptocurrency, carries significant risk and may not be suitable for all investors. Past performance is not indicative of future results. Users should consult with a qualified financial professional before making any investment decisions. Guavy makes no guarantee of trading profits or financial returns.

Market sentiment intelligence for apps, funds & agents

Location

729 55 Ave SW
Calgary AB T2V 0G4
Canada

© 2026 Guavy Inc