Galaxy estimates three Coldcard-linked attack waves drained 1,367.05 BTC, worth $88.6 million, from 4,585 Bitcoin addresses.