Investigators have shared attacker addresses with US authorities and crypto companies as Galaxy warns that attacks linked to the Coldcard vulnerability are continuing.