Tornado

Tornado Cash

Umbra

Cash

Bitcoin

About 64 Bitcoin, worth $4.17 million, and 200 Ether, worth $380,000, linked to the recent Coldcard exploit were sent to cryptocurrency mixing protocols, according to blockchain security platform CertiK.&nbsp;The Bitcoin transfer was from address bc1q0 to crypto mixing protocol Wasabi on Tuesday, according to blockchain <a href="https://arkm.com/explorer/address/bc1q0rvn88w08j75k4h48lf9fvhan7unjp7vjf5q6m" rel="noopener noreferrer nofollow">data</a> shared by CertiK.“We think it might be a smaller exploiter. There’s likely a few copycats after the initial exploit,” a CertiK spokesperson told Cointelegraph. The 200 Ether (ETH) was transferred to Tornado Cash on Wednesday, according to CertiK’s X <a href="https://x.com/CertiKAlert/status/2084920866526114183" rel="noopener noreferrer nofollow">post</a>.Crypto mixing protocols such as Tornado Cash typically pool and then scramble the cryptocurrency from multiple users, breaking the publicly traceable onchain link between senders and recipients. This makes it difficult to trace the stolen funds, decreasing the chances of asset recovery.In April, the hacker behind a $293 million <a href="https://cointelegraph.com/news/kelp-dao-hacker-launders-nearly-all-75700-eth-through-thorchain" rel="noopener noreferrer nofollow">Kelp DAO hack</a> laundered about 75,700 Ether, then worth $175 million, primarily through THORChain, generating about $910,000 in fee revenue for the protocol. The attacker also used the Umbra privacy protocol.The <a href="https://cointelegraph.com/news/coldcard-bitcoin-theft-100-million-three-waves" rel="noopener noreferrer nofollow">Coldcard exploit</a> has now become the third-largest cryptocurrency hack so far in 2026. It drained at least $100 million in Bitcoin across three confirmed attack waves from 7,300 victim wallets, according to Galaxy Digital. The company also identified a <a href="https://cointelegraph.com/news/suspected-4th-coldcard-attack-wave-sweeps-389-bitcoin-galaxys-thorn" rel="noopener noreferrer nofollow">suspected fourth wave</a> that could bring total losses to about $130 million in BTC.<img alt="" height="345" src="https://s3-images.ctmedia.io/media/content/pasted-image-2272.png" width="2048">Source: <a href="https://x.com/CertiKAlert/status/2084920866526114183" rel="noopener noreferrer nofollow">CertiK</a><h2 id="most-copycats-haven-t-moved-stolen-funds">Most copycats haven’t moved stolen funds</h2>Onchain tracing by TRM Labs showed that the majority of victim funds were still pooled in a small number of attacker-controlled addresses with limited mixing attempts, according to a Thursday <a href="https://www.trmlabs.com/resources/blog/the-largest-hardware-wallet-exploit-of-2026-inside-the-usd-116-million-coldcard-hack" rel="noopener noreferrer nofollow">report</a>.The blockchain intelligence company said that the “differences in transaction construction” during each attack wave hint at multiple attackers behind the exploit.The analysis is in line with Galaxy’s previous findings that showed at least <a href="https://cointelegraph.com/news/15-attackers-exploited-coldcard-vulnerability-galaxy" rel="noopener noreferrer nofollow">15 different attackers</a> who exploited the Coldcard vulnerability.Related: <a href="https://cointelegraph.com/news/dragonfly-defi-ai-hackpocalypse-fears" rel="noopener noreferrer nofollow">AI has not triggered DeFi ‘hackpocalypse,’ Dragonfly partner says</a>&nbsp;TRM Labs said that a firmware bug from March 2021 weakened seed randomness on some Coldcard wallets, cutting key strength to 40 bits from 128 bits, making it “brute-forceable without physical access.”&nbsp;Dragonfly managing partner Haseeb Qureshi <a href="https://x.com/hosseeb/status/2084327870961508408" rel="noopener noreferrer nofollow">wrote</a> that roughly “$2 of AI hardening” could have prevented the Coldcard exploit, citing social media reports that some AI models rediscovered the vulnerability that led to the attack in less than 20 minutes.&nbsp;Magazine: <a href="https://cointelegraph.com/features/does-botanixs-failure-prove-bitcoiners-dont-care-about-defi" rel="noopener noreferrer nofollow">Does Botanix’s failure prove Bitcoiners don’t care about DeFi?</a> &nbsp;

Coldcard hackers transfer 64 BTC and 200 ETH to cryptocurrency mixers

Table of Contents

Cointelegraph

Other articles published on Aug 6, 2026

Glassnode Highlights $63K as Crucial Support With Retail and Whale Buying Picking Up

Uniswap Opens a New Era For Token Launches On Robinhood Chain

Is Robinhood Chain's Memecoin Boom Just Getting Started?

Circle's USDC engine keeps growing even as revenue misses the mark

Tokenized gold can now back your perp positions on Ondo

White House Now Reviewing CLARITY Act Ethics Language

Join our free newsletter for daily crypto updates!