Coldcard Wallet Attackers Move 45% of Stolen Bitcoin

Galaxy Research reported that attackers behind the Coldcard wallet breach have moved approximately 45% of the stolen Bitcoin (BTC). Funds were transferred to Ethereum (ETH) via THORChain or moved through CoinJoin to obfuscate tracking. The attacker utilized 293 multi-signature vaults, with 18% of the total stolen funds currently suspected of being laundered. This incident ranks as the third-largest crypto hack of 2026, following the Kelp DAO and Drift Protocol exploits.