Confirmed losses from the Coldcard wallet incident have exceeded $100 million, with 1,596 Bitcoin stolen from about 7,300 addresses across three separate major attack waves and 14 smaller incidents, according to a new update from Galaxy Research reported by Cointelegraph. On Monday, Galaxy Digital's research arm said 73 victims had contacted its researchers, with victim reports confirming the first three major attacks and helping investigators identify smaller "footprints" that could represent opportunistic attackers exploiting the vulnerability.Galaxy Research also flagged a suspected fourth wave that could lift total losses to 2,055 BTC, worth about $130 million, though it excluded that event from its confirmed estimate pending victim confirmation, saying with "medium-high" confidence that the wave largely represented attacker activity, Cointelegraph reported. About 90% of the stolen Bitcoin remains unmoved, including funds tied to the first three confirmed incidents, and attacker and victim addresses have been shared with US federal law enforcement, crypto exchanges and cyber-investigation firms. The findings raise Galaxy's earlier estimate of 1,367 BTC across 4,585 addresses published Saturday. Galaxy warned that attacks were ongoing and urged uncertain Coldcard users to migrate their funds to a safe address immediately.