The suspected Coldcard exploit continues expanding as Galaxy Research now links the incident to 4,585 addresses drained across three waves, totaling 1,367.05 BTC worth about $88.6 million. The latest wave alone drained 207.73 BTC from 1,912 addresses. The attacker consolidated funds into eight verified wallets but moved only 0.06 BTC to a fresh address, leaving approximately 1,159.35 BTC untouched. The behavior suggests operational planning rather than opportunistic selling, with all stolen Bitcoin remaining 100% unspent. Future fund movements will determine whether investigators can continue tracking and potentially recover the stolen assets.
Source: Read the original article
