Alex Thorn: Suspected fourth wave Coldcard attack involving 462 addresses and 388.9 BTC

Galaxy Research research director Alex Thorn stated that there is a suspected fourth wave of organized Coldcard attacks. Alex Thorn discovered 218 transactions between blocks 960778 and 960792, involving 462 victim addresses and 216 new destination addresses, totaling approximately 388.9 BTC. All accounts have no input records before the Coldcard firmware boundary, with a transaction frequency of 13.8 times per block and a pre event rate of 0.3 times per block. Some funds have been transferred to the second hop address, and there are still transactions waiting to be confirmed in the memory pool. Confirmed transactions display RBF enabled.