Coldcard Wave 3 assailants first moved stolen funds, with some assets converted to ETH

On 3 September, Alex Thorn, Research Manager of Galaxy Digital, stated that the attackers of Coldcard Wave 3 had recently transferred for the first time stolen funds and converted part of their assets to ETH through a cross-chain decentralised trading platform, Thor Chain. In the case of the Wave1, Wave 2 or Wave 3, the funds were transferred for the first time from the initial wallet address of the assailant to another address on the chain. At present, about 90 per cent of the stolen funds of Wave 3 remain untransferred. Chain-based activities indicate that the attackers appear to have encountered problems in converting funds through THOR Chain, and that part of the transaction is constantly refunded, but the attackers continue to try to convert the remaining funds。