According to Cointelegraph, investigators have uncovered a sophisticated method employed by attackers targeting third-wave Coldcard hardware exploits. While researchers initially traced approximately 10% of the stolen cryptocurrency assets through THORChain—a cross-chain liquidity network—the funds were subsequently moved off that platform and deposited into an entirely new Ethereum wallet address. This action indicates that cybercriminals are actively adapting their tactics to evade detection by blockchain analytics tools after being flagged during transactions on decentralized bridges like THORChain. The shift from Bitcoin to Ether suggests a deliberate attempt to obscure the origin of illicit proceeds before they can be fully mapped or recovered by law enforcement agencies monitoring digital finance flows globally.
The exploitation chain remains active, with hackers utilizing specific vulnerabilities in Coldcard devices designed for offline key management and transaction signing without internet connectivity. By moving assets through complex routing mechanisms involving decentralized exchanges and cross-chain protocols, attackers prolong the lifecycle of stolen funds within legitimate blockchain networks. This case highlights the challenges faced by security teams tracking thefts originating from hardware wallets that operate independently but are still vulnerable to remote software attacks targeting device firmware or communication channels between applications running on these devices.
The successful conversion process demonstrates how malicious actors leverage established financial infrastructure such as THORChain for money laundering purposes before finalizing withdrawals into standard cryptocurrency addresses where ownership can be more easily transferred or sold publicly without raising immediate red flags among regulators overseeing digital asset markets worldwide today and throughout ongoing investigations across international jurisdictions involving blockchain technology usage in illicit activities globally.
