Movement on Coldcard stolen-fund addresses.
CONFIRMED OUT — 30.18476329 BTC left
bc1qmd5m5ktv7m5ffujxv4248fxv36myvdx79n8jp6 (Wave 2 collector)
balance 30.18478329 -> 0.00002000
Watching the 99 addresses published on coldcard-hack-tracker.vercel.app, all public chain data via mempool.space.
Alert directions are deliberate. A SPEND fires whenever a tracked address appears as a transaction INPUT. An INBOUND only fires above 0.01 BTC — these are the attacker's holdings, so a large arrival is a fresh consolidation, while the 546-sat dusting of the largest stash is noise and stays silent.
Currently held across tracked addresses: 1330.64234374 BTC. Ever received: 1999.63215273 BTC.
The tracker operator is tagged on this note.
