LATEST: The third-wave Coldcard attacker has moved 45% of their stolen Bitcoin, routing funds through THORChain and CoinJoin transactions, per Galaxy Research.

What happened

Galaxy Research reports that the third-wave Coldcard attacker has moved 45% of their stolen Bitcoin, routing funds through THORChain and CoinJoin transactions. This information comes directly from the supplied article.

Confirmed

Global impact / market context

Routing stolen Bitcoin through THORChain and CoinJoin, which are tools that help obscure transaction trails, makes it harder for authorities to track and recover the funds. This could reduce the likelihood of the stolen assets being returned.

Analyst inference

Bitcoin, the asset mentioned, may face selling pressure if the attacker converts large amounts to cash, potentially affecting price. However, the article provides no evidence of actual market movement or reactions.

Analyst inference

What to watch

1. The article confirms 45% of stolen Bitcoin has been moved, so watch for Galaxy Research updates on whether the remaining portion will be transferred next. Confirmed
2. Investors could monitor blockchain data for large Bitcoin transfers, as future movements by the attacker would signal continued attempts to hide funds. Proposed
3. If the remaining portion of stolen Bitcoin is moved, it may increase uncertainty about recovery efforts, potentially influencing investor confidence in Bitcoin's security. Analyst inference

Affected assets

• BTC — Bitcoin

Evidence

• x.com