Coldcard third-wave attacker moves 45% of stolen Bitcoin
- Posted on September 7, 2026
- By Cointelegraph
- 1 Views
- 1 min read
In brief
A significant portion of cryptocurrency stolen during Coldcard's recent security breach has been traced through mixing services. Galaxy Research's investigation reveals that nearly half of the illicit funds were laundered via THORChain swaps and CoinJoin privacy protocols. This sophisticated money-laundering activity highlights the ongoing challenges in tracking stolen digital assets and demonstrates how attackers exploit privacy-enhancing technologies to obscure transaction trails and evade law enforcement detection.
Summary auto-generated by AI from the original publisher's content. Editorial standards.
Coldcard third-wave attacker moves 45% of stolen Bitcoin
Galaxy Research said the attacker behind Coldcard’s third theft wave moved 45% of their haul through THORChain or into CoinJoin transactions.
