Key facts
- White hats recovered approximately 40% of Bitcoin from the second wave of a Coldcard exploit.
- 52.37 Bitcoin was transferred to the Crypto Recovery Trust in Wyoming.
- Some of the transferred Bitcoin originated from addresses not previously tracked by Galaxy Digital.
- Security researcher Nick Bax assisted in rescuing about 50 Bitcoin in late July due to the Coldcard entropy flaw.
- A total of 1,830 Bitcoin across 9,162 addresses were linked to the Coldcard vulnerability.
White hat hackers have successfully recovered a portion of Bitcoin that was exposed due to a vulnerability in Coldcard hardware wallets. Approximately 40% of the Bitcoin associated with the second wave of the exploit has been transferred to the Crypto Recovery Trust, a Wyoming-based entity established to return the funds to victims.
Galaxy Digital head of research Alex Thorn reported on X that a total of 52.37 Bitcoin was moved to an address controlled by the trust. He noted that 3.0134 BTC of this amount came from addresses that Galaxy had not previously tracked, suggesting these funds were also likely rescued from wallets affected by the Coldcard flaw.
Security researcher Nick Bax stated on September 9 that he had assisted in rescuing about 50 Bitcoin in late July, citing the imminent risk of theft due to the Coldcard entropy flaw. Thorn cited a total of 1,830 Bitcoin across 9,162 addresses linked to the Coldcard vulnerability.