Galaxy Research updated its tracking data on the Coldcard hardware wallet attack, confirming that 1,789.28 BTC were stolen from 8,865 addresses, worth about $114.7 million at the time of the incident. Galaxy Research head Alex Thorn said 87.3% of the stolen funds, or about 1,561 BTC, remains in attacker-controlled addresses and has not moved. None of the Bitcoin stolen in the first three waves of attacks has moved, while some funds in later attacks were transferred using CoinJoin mixing and by splitting into smaller amounts. The statistics are based on 221 victim reports covering 790.72 BTC in losses, with a median loss of 1.04 BTC. More than half of the reports involved losses greater than 1 BTC. Galaxy has shared the attacker addresses with exchanges, compliance firms, and law enforcement in hopes the funds can be frozen if they reach centralized intermediaries.