White hats outrun Coldcard hackers in 52-Bitcoin evacuation
White hats secured about 40% of the Bitcoin moved in the Coldcard exploit’s second wave, transferring it to a Wyoming trust for victims.
Security researchers have successfully recovered a significant portion of the Bitcoin stolen during the second wave of the Coldcard exploit. According to Galaxy Digital's head of research, Alex Thorn, approximately 40% of the Bitcoin involved in the second wave has been transferred to a Wyoming-based trust known as the Crypto Recovery Trust.
The trust was established with the intention of returning the funds to the victims affected by the vulnerability. A total of 52.37 Bitcoin were moved to an address controlled by the trust, as reported by Thorn in an X post on Monday. The transfer included 3.0134 BTC, which came from addresses that Galaxy Digital had not previously tracked.
These funds are believed to have been rescued from wallets affected by the Coldcard flaw, although Galaxy Digital could not confirm their exact origin. Security researcher and SEAL 911 incident responder, Nick Bax, mentioned on September 9 that he had helped rescue around 50 Bitcoin at the end of July due to the imminent risk of the stolen funds being stolen due to the Coldcard entropy flaw.
Galaxy Digital has compiled a total of 1,830 Bitcoin across 9,162 addresses linked to the Coldcard vulnerability. Individuals affected by the exploit can check if their wallet addresses are included in the trust's holdings by visiting the Crypto Recovery Trust website.
Written by urgent.news from Cointelegraph's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
