An alleged Coldcard hack involved 73 BTC worth $4.6 million, but on-chain detective Specter said blockchain data points to a more complicated chain of events. The funds originally came from the Whirlpool mixer two weeks ago, with some moving across chains to Ethereum before being deposited through a phishing Tornado Cash interface. Two mixers were used during the related transfers. The individual claiming to be the victim also appeared in Telegram groups focused on private key searches and brute force attacks, leading Specter to suggest the person may have been a threat actor whose funds were later stolen by another threat actor.