Galaxy Research's August 4 update put confirmed Coldcard-related thefts at 1,596 BTC from about 7,300 addresses, while a separate suspected fourth wave could lift the estimate further.