Across all attack waves, 82% of stolen coins remain in attacker-controlled addresses, while 18% have been moved for laundering.
The perpetrator of the third wave attack against the Coldcard wallet has escalated the pace of transferring funds, reports Galaxy Research. The exploiters have transferred approximately 45% of the Bitcoin stolen from the third wave so far. These transfers indicate a pattern of using methods that make blockchain tracking difficult.
The attacker built 293 separate vaults for the stolen Bitcoin and is emptying them in order of size, largest first.
The incident highlights vulnerabilities in crypto security, emphasizing the need for robust safeguards and collaboration to prevent future breaches.
Galaxy said 82% of Bitcoin stolen across all Coldcard attacks remains in the original addresses, with 18% moved in apparent laundering.