Third-wave Coldcard hacker has already transferred roughly 45% of the stolen Bitcoin through THORChain and CoinJoin transactions. According to Galaxy, 82% of stolen Bitcoin from Coldcard hacks has remained in the possession of attackers.