White Hats Transfer $4.5M in Bitcoin From Coldcard to Trust

White hats transferred bitcoin from compromised Coldcard signing devices into a trust so that potential victims can recover their funds, according to Galaxy Digital's Alex Thorn.

In a post on X on Monday, Thorn stated that white hats took the funds with the aim of protecting potential victims. The funds are now reportedly held in an address managed by Crypto Recovery Trust, a Wyoming Trust established to assist white hats in returning funds to victims.

A total of 52.37 BTC, valued at over $4.5 million at current prices, was transferred. Thorn added that this amount constitutes 2.8% of the coldcard exploit.

On July 31, criminals began seizing bitcoin that was stored using Coinkite's well-known Coldcard hardware wallet.

According to Canadian firm Coinkite, a firmware flaw in Coldcard devices caused seed generation to revert to a weak software-based Pseudorandom Number Generator rather than the hardware true random number generator, enabling hackers to effectively guess investor seedphrases.

Galaxy Digital monitored the movement of funds and reported that 1,789.28 bitcoins were lost in the attacks. At current prices, that is equivalent to $154.1 million in bitcoin.

Earlier this month, Nick Bax from universal market protocol Ump Labs stated that he was involved in efforts to recover the funds.

On X, Bax wrote, “Finally able to say that at the end of July, I was involved in the rescue of ~50 BTC which were “imminently going to be stolen due to the COLDCARD entropy flaw,”

He continued: “The funds are currently held by a Wyoming trust, which will ensure that funds are returned to their rightful owners.”

Since the attack occurred, cautious investors have been transferring their coins to alternative storage solutions, including exchanges.

Coinkite stated that the bug in its software “silently went unnoticed” and that “its potential impact grew with every release” of its products.

A few days after the initial hack, the company advised investors to update their software or remove their funds from the popular hardware wallet.