"Wave one happened in 41 minutes. Not one of those UTXOs was created before March 17th, 2021, when the cold card firmware bug was introduced."

Alex Thorn breaks down the attack waves.