Coldcard Hackers Launder $4.55M in Bitcoin and Ethereum via Mixers

Hackers behind the Coldcard exploit have laundered $4.55 million in cryptocurrency through mixing services, transferring 64 Bitcoin and 200 ETH to obfuscate their origins. According to blockchain security firm CertiK, the stolen funds were sent to Wasabi and Tornado Cash mixers, while the majority of the stolen assets remain traceable in attacker-controlled wallets.

This incident underscores the persistent security challenges within the cryptocurrency ecosystem and the evolving sophistication of hacking attempts. The movement of funds to mixers suggests efforts to obscure the trail of stolen assets, yet blockchain transparency allows most transactions to be monitored. Security experts warn that multiple attackers may be exploiting the same vulnerability, indicating that the Coldcard breach could impact more users in the coming days.

The Bitcoin transfer was from address bc1q0 to crypto mixing protocol Wasabi on Tuesday, according to blockchain data shared by CertiK. "We think it might be a smaller exploiter. There's likely a few copycats after the initial exploit," a CertiK spokesperson told Cointelegraph. The 200 Ether (ETH) was transferred to Tornado Cash on Wednesday, according to CertiK's X post.