According to CoinMeta, based on early monitoring of in, an online investigator Specter discovered that a person claiming to be a victim of a hack to Coldcard had 73 BTC (valued at approximately $4.6 million) that came from a Whirlpool mixer two weeks prior. Part of this funds was transferred across chains to Ethereum and then deposited through a phishing Tornado Cash interface. This individual was found to be part of a Telegram group involved in private key searches and brute-force cracking, and Specter believes that this victim may actually be the perpetrator of the threat.