Coldcard thieves are prioritizing the largest portion of the third batch of vaults and have moved 97.09 BTC, worth about $7.7 million, according to monitoring cited by Bitcoin News. Galaxy Research said the transferred amount represents roughly 45% of the assets in that batch. The attackers created 293 2-of-2 vaults themselves. They moved some of the tokens through THORChain on Sept. 2, then sent funds through multiple rounds of CoinJoin over the weekend. The exploited weakness came from a 2021 firmware flaw that reduced seed entropy to as little as 40 bits. Around 82% of the tokens stolen through the exploit have not yet been moved. The available information does not identify the wallets beyond their connection to the Coldcard theft or provide additional details on the remaining assets. The transfers described in the report cover the 97.09 BTC already moved from the vault batch, while the rest of the batch remains part of the reported holdings.
Coldcard thieves are prioritizing the largest portion of the third batch of vaults, according to monitoring cited by Bitcoin News. Galaxy Research said the related wallets have moved 97.09 BTC, worth about $7.7 million. That amount accounts for roughly 45% of the assets in the batch.
The attackers created 293 2-of-2 vaults themselves. On Sept. 2, they moved some tokens through THORChain. Over the weekend, the assets were sent through multiple rounds of CoinJoin.
The vulnerability came from a 2021 firmware flaw that reduced seed entropy to as little as 40 bits. About 82% of the tokens stolen through the exploit have still not been moved.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
