Coldcard wallet hacker moves stolen bitcoin after weeks of silence

An attacker linked to the third wave of Coldcard hardware wallet thefts has begun moving part of the stolen bitcoin after weeks of silence. According to ArzDigital, the hacker converted about 10% of the stolen assets to Ethereum via the THORChain protocol and moved the funds to a new Ethereum address; THORChain said it has shared the address details with law enforcement and security firms so the funds can be traced if moved again to centralized platforms. Before this transfer, about 87% of the stolen assets, roughly 1,789 bitcoin worth approximately $114 million, had remained in the original addresses. Investigations show the hacker ran into problems completing some transactions while using THORChain, though the exact cause is unclear.