A wallet linked to the Coldcard hacker moved 30.185 BTC, worth about $1.94 million, to a new address roughly an hour before the transaction was flagged on August 7. Lookonchain said the funds are tied to the earlier theft of 2,055 BTC, a stash valued at about $130 million. The fresh movement suggests renewed activity from the address after the initial exploit, with on-chain transfers often watched closely for signs that stolen assets may be getting repositioned across wallets.