The Coldcard exploiter has moved 45% of Bitcoin stolen in Wave 3 attacks, with 97.09 BTC already spent as Galaxy tracks the funds.