Coldcard hacker swaps stolen Bitcoin for ETH via THORChain

MGBX Editorial Team3

The third-wave Coldcard exploiter moved about 10% of stolen funds through THORChain as researchers traced the assets to a new Ethereum address.

This article is for informational purposes only and does not constitute investment advice. Digital asset markets are volatile; manage risk carefully.
Coldcard hacker swaps stolen Bitcoin for ETH via THORChain - BTC

Details

The third-wave Coldcard exploiter moved about 10% of stolen funds through THORChain as researchers traced the assets to a new Ethereum address.

A hacker linked to the third wave of Coldcard wallet thefts has started swapping stolen Bitcoin for Ether through THORChain.

Galaxy head of research Alex Thorn took to X on Wednesday to report that the third-wave exploiter moved about 10% of the stolen funds, with 90% remaining untouched. Thorn said it marked the first time funds from any of the three waves had moved onchain from the original hacker addresses.

“The hacker appears to be having some issues swapping all the funds through THORChain — they keep getting refunded and he keeps retrying,” he said.

Thorn said onchain analysts traced the funds through THORChain to a new Ethereum address, adding that he shared it with relevant authorities and crypto companies. It remains unclear whether the attacker will attempt to further obscure or move the assets through an exchange, he added.

The transfers follow a Coldcard exploit that Galaxy Research linked to the theft of at least 1,789 Bitcoin from 8,865 addresses , worth about $114.7 million at the time they were stolen. Blockchain security company CertiK reported in August that hackers linked to the exploit had sent 64 Bitcoin and 200 Ether to cryptocurrency mixers such as Tornado Cash.

The latest movement comes days after Thorn said the Coldcard attackers remained active , citing the Aug. 28 sweep of a deliberately weakened researcher wallet designed to test the attackers’ ability to find vulnerable keys.

Related: Lazarus Group-linked addresses move $30M through Hyperliquid

Subscribe to daily byte-sized crypto news from Cointelegraph

BTC will hit $1M by 2030... but Arthur Hayes is buying ETH instead

Bitcoin ETFs notch best month of 2026 as BTC gains 25% in August

Bitcoin stays flat as global bond bear market rages on, pushing JGB to high

BTC will hit $1M by 2030... but Arthur Hayes is buying ETH instead

Bitcoin ETFs notch best month of 2026 as BTC gains 25% in August

Bitcoin stays flat as global bond bear market rages on, pushing JGB to high

Hyperscale Data ends Michigan BTC mining as holdings fall 79%

Bitcoin’s apparent demand turns negative as price struggles with $77K

Does the Bitcoin rally mean we haven’t wasted our lives in crypto?

Japan’s Remixpoint dumps altcoins, leaves 1,506 BTC as sole crypto bet

Thai businessmen sue Tether for freezing $42M in $61M pig butchering case

Cointelegraph is committed to providing independent, high-quality journalism across the crypto, blockchain, AI, and fintech industries.

All news, reviews, and analyses are produced with full journalistic independence and integrity. For more details on our standards and processes, please read our Editorial Policy .

BTC, ETH

Source

Cointelegraph RSS

Source: Cointelegraph RSS