Galaxy Research(@glxyresearch):Coldcard ‘Wave 3’ exploiter continues to move funds In wave 3, the exploiter created 293 2-of-2 multisig vaults for each victim’s coins. The first movements on 9/2 sent coins over THORChain to Ethereum. Tonight’s movements are going into coinjoins rounds.

Galaxy Research

@glxyresearch

$GLXY | Newsletter | Podcast | Reports Disclaimer:

Joined May 2019

74 Following 24.1K Followers

Galaxy Research@glxyresearch

2026.09.07 02:19

Coldcard ‘Wave 3’ exploiter continues to move funds In wave 3, the exploiter created 293 2-of-2 multisig vaults for each victim’s coins. The first movements on 9/2 sent coins over THORChain to Ethereum. Tonight’s movements are going into coinjoins rounds.