Don't want to trade it yourself?
Our desk runs DEX portfolios on profit share.
Currencies39023
Market Cap$ 2.80T+4.06%
24h Spot Volume$ 45.02B+1.91%
DominanceBTC57.87%+0.80%ETH10.88%+1.00%
ETH Gas0.18 Gwei
Market<a href="https://xpertsstudio.com/bitcoin-tops-80000-again/” title=”Bitcoin Tops $80,000 Again”>Bitcoin
Sep 3, 2026
< 1min read
byPeter Mwangi
forCoinEdition
The Coldcard hacker moved stolen Bitcoin from the Wave 3 attack for the first time, transferring part of the funds and swapping BTC to ETHlinked to Waves 1–3. The cross-chain DeFi/DEX swap complicates investigator tracking and highlights ongoing crypto security and forensic risks as funds move beyond Bitcoin
See what traders are focused on
- Coldcard hacker moves stolen BTC for the first time, ending a long period of inactivity.
- Attacker swaps Bitcoin to ETH via THORChain, shifting funds across blockchains.
- Cross-chain movement adds complexity as investigators track stolen funds beyond Bitcoin.
The Coldcard hacker has moved stolen Bitcoin from the Wave 3 attack for the first time, ending a period in which the funds remained dormant in the original attacker-controlled addresses.
Galaxy Digital research head Alex Thorn reported that the exploiter transferred part of the stolen BTC and swapped it into Ethereum through THORChain, marking the first known movement directly from the original hacker addresses linked to Waves 1, 2, or 3.
The transactions mark a shift from earlier behavior, where the stolen Bitcoin remained untouched. The attacker has now begun moving funds across blockchains, offering t…
Source: cryptorank.io