Recovery Trust Secures Over 52 Bitcoin From Coldcard Exploit for Victims

In a significant development following the Coldcard exploit, white hat hackers have transferred 52.37 bitcoins, worth more than $4.5 million, to a trust designed to assist victims in reclaiming their funds. This action was confirmed by Alex Thorn from Galaxy Digital, who announced the transaction on social media.

The bitcoins are currently held by the Crypto Recovery Trust, a Wyoming-based entity established to facilitate the return of stolen funds to their rightful owners. This recovery effort represents approximately 2.8% of the total 1,789.28 bitcoins lost due to the Coldcard vulnerability, which was exploited starting July 31.

The Coldcard hardware wallet, produced by Canadian company Coinkite, suffered from a firmware bug that allowed hackers to exploit weak seed generation processes. As a result, many investors have since moved their assets to alternative storage solutions, including exchanges.

Victims of the exploit can now verify whether their funds have been recovered by checking their public Bitcoin addresses against the trust's records. This new public portal allows users to initiate claims if a match is found, although ownership verification will still be required.

In addition to the 52.37 bitcoins, there are indications of further recoveries, with additional funds potentially identified by Galaxy Digital. However, the exact origins of these funds remain uncertain.

Coinkite has acknowledged the oversight in its software, stating that the bug went unnoticed for an extended period, exacerbating the situation as it affected multiple product releases. The company has urged users to update their software or transfer their funds to secure storage.