Whitehats move 52 bitcoin from the Coldcard hack to a recovery trust

Security researchers have successfully recovered a significant portion of the Bitcoin stolen during the second wave of the Coldcard exploit. According to Galaxy Digital's head of research, Alex Thorn, approximately 40% of the Bitcoin involved in the second wave has been transferred to a Wyoming-based trust known as the Crypto Recovery Trust.

The trust was established with the intention of returning the funds to the victims affected by the vulnerability. A total of 52.37 Bitcoin were moved to an address controlled by the trust, as reported by Thorn in an X post on Monday. The transfer included 3.0134 BTC, which came from addresses that Galaxy Digital had not previously tracked.

These funds are believed to have been rescued from wallets affected by the Coldcard flaw, although Galaxy Digital could not confirm their exact origin. Security researcher and SEAL 911 incident responder, Nick Bax, mentioned on September 9 that he had helped rescue around 50 Bitcoin at the end of July due to the imminent risk of the stolen funds being stolen due to the Coldcard entropy flaw.

Galaxy Digital has compiled a total of 1,830 Bitcoin across 9,162 addresses linked to the Coldcard vulnerability. Individuals affected by the exploit can check if their wallet addresses are included in the trust's holdings by visiting the Crypto Recovery Trust website.