Coldcard exploiter moves 45% of funds stolen from ‘Wave 3’ attacks, Galaxy says

Galaxy Intelligence reports the Coldcard exploiter behind the “Wave 3” attacks has moved about 45% of the stolen funds. These transfers indicate active cash-out or laundering attempts, increasing the likelihood that coins will be routed through mixers or exchanges and complicating on-chain tracing. For Bitcoin, this raises near-term sell pressure risk and underscores the need for firmware fixes, tighter hardware-wallet supply-chain controls, and improved user operational security.