White Hats Recover 52.37 Bitcoin from Coldcard Exploit and Transfer to Wyoming Trust

Security researchers have transferred 52.37 Bitcoin that were exposed by a Coldcard hardware‑wallet vulnerability to an address controlled by the Crypto Recovery Trust, a Wyoming‑registered entity created to return the assets to affected users.

Scale of the recovery

Galaxy Digital’s head of research, Alex Thorn, reported that the transferred amount represents about 40 % of the Bitcoin moved in the second wave of the exploit. The total number of Bitcoin linked to the Coldcard flaw is estimated at 1,830 BTC across 9,162 addresses.

Details of the rescued funds

• 52.37 BTC were sent to the Crypto Recovery Trust.
• 3.0134 BTC of the transfer came from addresses not previously tracked by Galaxy Digital.
• The rescued Bitcoin is intended for victims whose wallets were compromised by the Coldcard entropy flaw.

How victims can verify ownership

Potential victims can enter their wallet addresses on the Crypto Recovery Trust website to check whether the trust now controls their funds.

Background on the Coldcard exploit

The Coldcard vulnerability, identified as an entropy flaw, allowed attackers to generate predictable private keys and move funds from affected wallets. Security researcher Nick Bax, a former SEAL 911 incident responder, previously announced the rescue of about 50 BTC in late July, describing the funds as “imminently going to be stolen.”

Next steps

Galaxy Digital has not confirmed the origin of the newly identified 3.0134 BTC, but it is presumed to be part of the compromised wallets. Thorn did not respond to further inquiries.