Written by Helen Partzstaff writerReviewed by Yohan Yunstaff editor

Written by Helen Partzstaff writer

Reviewed by Yohan Yunstaff editor

Coldcard hacker swaps stolen Bitcoin for ETH via THORChain

Latest NewsPublishedSep 3, 2026

The third-wave Coldcard exploiter moved about 10% of stolen funds through THORChain as researchers traced the assets to a new Ethereum address.

A hacker linked to the third wave of Coldcard wallet thefts has started swapping stolen Bitcoin for Ether through THORChain.

Galaxy head of research Alex Thorn took to X on Wednesday to report that the third-wave exploiter moved about 10% of the stolen funds, with 90% remaining untouched. Thorn stated it marked the first time funds from any of the three waves had moved onchain from the original hacker addresses.

“The hacker appears to be having some issues swapping all the funds through THORChain — they keep getting refunded and he keeps retrying,” he stated.

Thorn stated onchain analysts traced the funds through THORChain to a new Ethereum address, adding that he shared it with relevant authorities and crypto companies. It remains unclear whether the attacker will attempt to further obscure or move the assets through an exchange, he added.

The transfers follow a Coldcard exploit that Galaxy Research linked to the theft of at least 1,789 Bitcoin from 8,865 addresses, worth about $114.7 million at the time they were stolen. Blockchain security company CertiK reported in August that hackers linked to the exploit had sent 64 Bitcoin and 200 Ether to cryptocurrency mixers such as Tornado Cash.

The latest movement comes days after Thorn stated the Coldcard attackers remained active, citing the Aug. 28 sweep of a deliberately weakened researcher wallet designed to test the attackers’ ability to find vulnerable keys.

Related: Lazarus Group-linked addresses move $30M through Hyperliquid

Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.

• Hardware Wallet
• THORChain
• Hacks
• Self Custody
• Transactions
• Bitcoin

More on the subject

BTC will hit $1M by 2030… but Arthur Hayes is buying ETH instead

20 hours ago

Ciaran Lyons

Bitcoin ETFs notch best month of 2026 as BTC gains 25% in August

Sep 2, 2026

Helen Partz

Bitcoin stays flat as global bond bear market rages on, pushing JGB to high

Sep 1, 2026

Charles Bennett

BTC will hit $1M by 2030… but Arthur Hayes is buying ETH instead

20 hours ago

Ciaran Lyons

Bitcoin ETFs notch best month of 2026 as BTC gains 25% in August

Sep 2, 2026

Helen Partz

Bitcoin stays flat as global bond bear market rages on, pushing JGB to high

Sep 1, 2026

Charles Bennett