Coldcard exploiter moves 45% of funds stolen in ‘Wave 3’ attacks: Galaxy

The movement of a significant portion of stolen funds signals that the attacker is actively managing the assets, which could complicate recovery efforts and law enforcement tracking. For the 190 victims, this redistribution across thousands of addresses makes tracing and freezing more difficult. The key question now is whether the remaining 55% will be moved similarly, and how exchanges and analytics firms respond to flag these addresses. This development underscores the persistent challenge of asset recovery in crypto thefts, where post-heist fund mobility is a critical factor in outcomes.