Coldcard ‘Wave 3’ attacker moves Bitcoin again: ‘Moved apparently for laundering purposes’

The attacker linked to the Coldcard “Wave 3” incident has moved additional Bitcoin from the compromised funds, with blockchain activity reportedly consistent with efforts to launder or obscure the assets’ origins. The transactions do not by themselves confirm successful cash-out or identify the operator, but they indicate the stolen holdings remain active and under control. The movement could increase selling and counterparty risk if the funds reach exchanges or other liquid venues, while reinforcing the need for continued address and transaction monitoring.