Whitehats move 52 bitcoin from the Coldcard hack to a recovery trust
Reported by CoinDesk · AI-assisted summary by ChikoCorp AI News Desk
AI-generated summary based on the linked source; not independently verified. This is not investment advice. Verify market-moving details at the original publisher before acting. See our editorial policy, AI content policy, and financial disclaimer.
Summary
White-hat hackers moved 52.37 BTC linked to the July Coldcard hardware wallet exploit into an address connected to a newly formed recovery trust. The Coldcard exploit involved attacker reconstruction of wallet seeds generated by weaker software-based randomness, causing over $100 million in estimated bitcoin losses. Victims can check cryptorecoverytrust.com to see if their funds were recovered.
Why it matters
The recovery of some funds by ethical hackers helps protect victim assets following a major hardware wallet security breach. This effort may improve confidence in ongoing recovery efforts and provide victims a channel to verify recovered funds. The source does not elaborate further on broader market or regulatory impacts.
Key context
The Coldcard hardware wallet vulnerability was due to wallets generating seeds with weak randomness, which attackers exploited starting July 30, resulting in multiple attack waves and significant losses. Coinkite patched the firmware after the incident, but funds exposed under the previous process remain vulnerable. Whitehat operators have since moved some recovered coins to a recovery trust address for safekeeping until return to victims.
Key numbers and entities
The recovered amount is 52.37 BTC, representing 2.8% of tracked exploit funds and about 40% of Wave 2 funds. The transaction was confirmed in block 967,948 and includes additional 3.0134 BTC with unconfirmed whitehat status. Entities mentioned include Coinkite (Coldcard maker), Galaxy Digital’s Head of Research Alex Thorn, and the cryptorecoverytrust.com website.
What remains unclear
The source does not specify how or when the recovered funds will be returned to victims. It is also unconfirmed whether all coins moved to the recovery trust are from white-hat activity. Further details on the organization and legal status of the recovery trust are not provided.