At least 1,789 BTC were stolen, and the Coldcard hackers began exchanging them for ETH via THORChain. Approximately 10% of the stolen BTC have already been transferred.

According to Bitcoin News, hackers linked to the third wave of the Coldcard wallet theft have begun transferring stolen funds and exchanging Bitcoin for ETH via THORChain. Alex Thorn of Galaxy Research stated that approximately 10% of the stolen BTC has been transferred, with the remaining 90% untouched. The attackers reportedly encountered difficulties exchanging funds, with multiple THORChain transactions being returned and retried. Researchers have traced the exchange operations to a new Ethereum address, which Thorn stated has been shared with relevant authorities and cryptocurrency companies. Galaxy Research indicates that the broader Coldcard exploit has resulted in at least 1,789 BTC being lost across 8,865 addresses, valued at approximately $115 million at the time of the theft.