Coldcard Hacker Increases Bitcoin Transfers

Coldcard hacker, who has kept most of his BTC in his original address, except for very small transfers, has started to increase his transfers in recent days. According to Galaxy Research, the attacker empties the wallets he created, known as "vaults", from large to small, depending on the amount of BTC in them. It seems that the hacker or hackers started to transfer the Bitcoins they stole, especially in the 3rd wave.

The first big move is on September 2…

The hacker, who created various wallets to store the BTCs he stole, created a total of 294 "vaults". Now it appears that these safes are slowly being emptied. The attacker has managed to completely empty 11 safes in total so far.

The attacker, who started his first large transfer on September 2, moved 20.5 BTC that day and transferred these BTCs to the Ethereum network by passing them through ThorChain.

On September 5, another 15.4 BTC was released from the second largest vault.

Yesterday, on September 6, a total of 61.12 more BTC was removed from 10 different safes. And thus, 90.7 BTC worth a total of $ 7.7 million was released from the attacker's safes.

There is also Coinjoin

It was also stated that the attacker used Bitcoin hiding platforms other than Thorchain. It could not be seen which platforms were used in this style, which is referred to as the Coinjoin technique.

As it is known, Coinkite company, the manufacturer of Coldcard company, fixed the error by releasing a new update, but this change does not work automatically in old wallets. So this error remains there.

Approximately 82% of the 1806 BTC stolen in total are still in the wallets to which they were first sent.