A fourth suspected Coldcard attack wave moved 448.7 BTC from 709 addresses, while unconfirmed transactions may still be replaceable.
