Threat actors responsible for exploiting Coldcard hardware wallets have moved $4.5 million in stolen cryptocurrency through mixing protocols in an attempt to obscure the funds' origins. Blockchain security platform CertiK tracked 64 Bitcoin valued at $4.17 million and 200 Ether worth $380,000 being transferred to privacy-focused mixing services between Tuesday and Wednesday.
The Bitcoin portion was sent from address bc1q0 to Wasabi, a cryptocurrency mixing protocol, on Tuesday. The following day, attackers transferred 200 ETH to Tornado Cash, another mixing service designed to break the transaction trail on blockchain networks. Despite these laundering attempts, CertiK reports that the majority of stolen funds remain visible in wallets controlled by the attackers.
CertiK analysts believe multiple threat actors may be involved in the exploitation. A company spokesperson suggested the transactions indicate a smaller-scale exploiter, with likely copycat attackers following the initial breach. This pattern suggests the original vulnerability may have been discovered and exploited by additional parties after the first compromise became known.
The use of cryptocurrency mixers represents a standard money laundering technique for cybercriminals seeking to hide stolen digital assets. Wasabi and Tornado Cash both function by pooling transactions from multiple users, making it difficult to trace the original source of funds. However, blockchain analysis tools have become increasingly sophisticated at identifying patterns even after mixing attempts.
Organizations and individuals using Coldcard hardware wallets should review their security configurations and monitor for any unauthorized transactions. Users should verify they are running the latest firmware versions and follow official security advisories from Coldcard. Anyone who suspects their wallet may have been compromised should immediately transfer remaining funds to a new, secure wallet and report the incident to relevant authorities and the wallet manufacturer.
Source: https://cointelegraph.com/news/coldcard-hackers-64-btc-200-eth-cryptocurrency-mixers