On-chain investigator Specter said the account given by a supposed victim who claimed to have moved funds from Bitcoin to Ethereum after a Coldcard compromise does not line up with blockchain records. According to Specter’s monitoring, the 73 BTC involved, worth about $4.6 million, had originally come from the Whirlpool mixer two weeks earlier. Part of the funds then moved across chains to Ethereum and was deposited through a phishing Tornado Cash interface. Specter added that two mixers were used during the transfer process. The individual was also found in Telegram groups focused on private key searching and brute-force cracking. Based on those findings, Specter said the claimed victim may in fact be a threat actor, and the funds may themselves have been stolen by another threat actor.
ChainCatcher reported, citing on-chain investigator Specter, that a supposed victim claimed they moved funds from Bitcoin to Ethereum after a Coldcard wallet was hacked.
Blockchain data reviewed by Specter tells a different story. The 73 BTC involved, worth about $4.6 million, had come from the Whirlpool mixer two weeks earlier. Part of those funds was later bridged to Ethereum and deposited through a phishing Tornado Cash interface.
Specter said two mixers were used during the movement of the funds. The individual was also found in Telegram groups related to private key searching and brute-force cracking.
Based on that activity, Specter said the claimed victim may be a threat actor, and the funds may also have been stolen by another threat actor.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
