Coldcard vulnerability-related attacks have led to the theft of at least 1,778 BTC, worth about $112 million, and the eventual losses could be higher, Galaxy Research said. The firm said it tracked three main attack waves and more than 30 smaller attack traces, while also identifying at least 33 attacker address clusters. It added that no high-confidence new attack wave has been found after Aug. 6. Roughly 1,531 BTC remains in addresses controlled by the attackers, while about 246 BTC has been moved. Of the transferred funds, about 65% passed through CoinJoin (a privacy-focused transaction mixing method) and about 35% went to exchanges or cross-chain bridges (services that move assets between blockchains). Galaxy Research said it has shared a list of relevant attack addresses with crypto exchanges, compliance and investigative organizations, and law enforcement agencies.