Coldcard hackers transferred millions in Bitcoin and Ether to crypto mixers, while most stolen funds remain in attacker-controlled wallets.