The hacker linked to the third wave of Coldcard wallet attacks has begun swapping stolen Bitcoin for Ether through THORChain. Galaxy Research’s Alex Thorn tracked the transactions to a new Ethereum address and shared it with organisations monitoring the funds. Some swaps reportedly failed, potentially because of technical issues or insufficient liquidity.