6.6 Security Coldcard Wave 3攻击者已转移45%被盗比特币，资金经THORChain与CoinJoin流转。最大保险库已被清空，82%资产仍在攻击者钱包。
据多家媒体援引Galaxy Research报道，Coldcard硬件钱包Wave 3漏洞的攻击者已转移约45%的被盗比特币。这些资金通过跨链协议THORChain和隐私混币工具CoinJoin进行转移，以混淆资金流向。 攻击者为受害者资产创建了293个2-2多签保险库，并优先清空了最大的保险库。目前，前11大保险库的资金已被转移，累计约97.09 BTC（价值约780万美元）已被花费。 Galaxy Research估算，82%的被盗Coldcard资金仍在攻击者控制的钱包，18%已被转移，疑似用于洗钱。这些盗窃事件源于2021年Coldcard固件漏洞，削弱了种子生成机制，使攻击者能够暴力破解私钥。新发现的保险库可能使总损失增至约1,806 BTC。另有关于Wave 4的传闻，但尚未证实。
Hacker Transfers Stolen Bitcoin Through CoinJoin and THORChain Techniques
Coldcard Attacker Moves $7.7M in Bitcoin, Shifting 45% of Stolen Funds
Coldcard Hacker Moves $7.7M, Nearly Half of Third-Wave Bitcoin Haul
Coldcard Bitcoin Exploit: Latest Theft and Laundering Update
Coldcard wallet hack exploiter moves 45% of stolen Bitcoin via THORChain and CoinJoin
Coldcard Bitcoin exploit: hacker launders $7.8M as 82% stays frozen
Coldcard attacker moves 45% of stolen Bitcoin through THORChain and CoinJoin, Galaxy reports
Coldcard third-wave attacker moves 45% of stolen Bitcoin
Coldcard Exploiter Moves 45% of Stolen Funds
Coldcard exploiter moves 45% of funds stolen from ‘Wave 3’ attacks, Galaxy says
Coldcard Hacker Moves 45% of Wave 3 Bitcoin via THORChain and CoinJoins
Coldcard attackers continue transferring funds, with approximately 45% of the stolen assets having entered mixing or cross-chain paths.
