White hats secure 52 Bitcoin from Coldcard exploit, move to Wyoming trust
In brief
- White hats transferred 52.37 Bitcoin from Coldcard vulnerability to Wyoming Crypto Recovery Trust
- Rescue represents 40% of Bitcoin swept in the second wave of the exploit
- 1,830 BTC across 9,162 addresses linked to the Coldcard flaw
- Victims can verify funds by entering wallet addresses on the trust's website
Rescue and Recovery
A total of 52.37 Bitcoin was moved to an address controlled by Wyoming-based Crypto Recovery Trust, according to Thorn's announcement. The rescue effort reflects coordinated action by security researchers to protect victims before bad actors could drain the accounts.
Security researcher Nick Bax rescued approximately 50 Bitcoin at the end of July due to imminent theft risk from the Coldcard entropy flaw. Bax, a SEAL 911 incident responder, acted quickly when he identified the vulnerability could lead to rapid fund loss.
The Scope of the Vulnerability
A total of 1,830 BTC across 9,162 addresses have been linked to the Coldcard vulnerability, according to Thorn's data. This means the 52 Bitcoin moved to the trust covers only a portion of the total exposed funds — highlighting the scale of the entropy flaw.
3.0134 BTC included in the transfer came from addresses Galaxy Digital had not previously tracked. The discovery of previously unknown compromised addresses underscores ongoing efforts to identify all affected wallets.
Verifying Your Funds
Potential victims can enter their wallet addresses on the Crypto Recovery Trust website to determine whether the trust controls their funds. The verification process allows affected users to confirm their Bitcoin is held safely pending recovery procedures.
Frequently asked questions
What is the Coldcard vulnerability?
The Coldcard entropy flaw is a security weakness in the hardware wallet that exposed private keys across thousands of addresses. Researchers discovered the vulnerability could allow attackers to steal funds from affected wallets.
How much Bitcoin was affected by the Coldcard exploit?
A total of 1,830 BTC across 9,162 addresses have been linked to the Coldcard vulnerability, according to Galaxy Digital research. The 52.37 Bitcoin secured by white hats represents a portion of the compromised funds.
Can I check if my Bitcoin is in the Crypto Recovery Trust?
Yes. Victims can enter their wallet addresses on the Crypto Recovery Trust website to verify whether the trust controls their funds. This allows affected users to confirm their Bitcoin is held safely.
