Galaxy Research said analysis of attacks using weaker COLDCARD seed phrases (wallet recovery words) found distinct groups with different operating patterns. Bitcoin News monitoring cited the research as showing that the 10 largest groups alone moved about 1,700 BTC, including one group that transferred more than 1,080 BTC. Researchers separated the attackers by their fee strategies, transaction timing, fund aggregation methods, and the destinations to which the stolen Bitcoin was sent. Several of the largest groups are still suspected of holding nearly all of the stolen BTC. Victims of the COLDCARD attacks were told they can contact @intangiblecoins for help gathering evidence and reaching relevant authorities.