Bitcoin thefts from compromised Coldcard wallets are still ongoing, Galaxy Research warns, urging users to move funds after a 2021 firmware flaw.