Bitcoin stolen through the Coldcard flaw is now moving through a mixer, but the largest attacker-controlled stash remains untouched.