52.37 BTC moved: Coldcard Bitcoin recovery reaches 2.8% of losses

Bitcoin recovered from a security disaster doesn’t always end up back in circulation right away. Sometimes it lands in a trust, waiting for its rightful owner to prove ownership. That’s exactly what happened this week in the aftermath of the Coldcard hardware wallet exploit, as whitehat researchers pushed forward a new phase of Coldcard Bitcoin recovery by moving a fresh batch of rescued funds into a dedicated recovery address.

Key takeaways

• According to Galaxy Digital researcher Alex Thorn, 52.37 BTC tied to Coldcard exploit wallets was transferred by whitehat operators into a recovery trust address.
• The transfer represents 2.8% of the total exploit funds tracked by Galaxy Digital.
• The Crypto Recovery Trust is a Wyoming statutory trust set up to hold recovered digital assets while ownership claims are verified.
• The Coldcard exploit traces back to a firmware flaw that generated wallet seeds using MicroPython’s software-based pseudorandom generator instead of the device’s hardware RNG.
• Loss estimates across multiple attack waves range from roughly 594 BTC to as much as 1,816 BTC, and Coinkite’s firmware patch cannot repair seeds already weakened before the fix.

Whitehat Recovery of 52.37 BTC from Coldcard Exploit

Whitehat operators consolidated 52.37 BTC tied to the July Coldcard exploit and sent it to a fresh address carrying an OP_RETURN message pointing to “claim:cryptorecoverytrust dot com.” Galaxy Digital’s Head of Research, Alex Thorn, tracked the movement to Bitcoin block 967,948 and tied the coins to the exploit’s Wave 2 cluster, alongside footprints labeled AA, AU and AX.

Inside the Fund Transfer

Galaxy Research separately identified the same block carrying 20 inputs and 480 outputs, publishing the transaction ID as part of its ongoing tracking of exploit-linked wallets. Thorn described the coins as whitehat-controlled funds, meaning they were swept by ethical security researchers rather than by the attackers who originally exploited the weakened seeds.

This distinction matters for anyone trying to gauge how much of the original theft might eventually make its way back to victims, since not every coin that left a compromised wallet ended up in a hacker’s hands.

Percentage of Total Tracked Exploit Funds

The 2.8% figure Thorn cited applies specifically to Galaxy Digital’s own tracked total of exploit-linked Bitcoin — it is not an official loss or recovery number from Coinkite, the maker of the Coldcard wallet. That distinction is worth underlining because loss estimates for the incident have varied significantly depending on which attack waves and clusters analysts include in their count.

Role and Function of the Crypto Recovery Trust

The Crypto Recovery Trust exists to hold rescued digital assets safely until their original owners can be identified and verified, rather than leaving recovered coins sitting in researcher-controlled wallets. Legally, the entity is registered as the Recovered Digital Asset Statutory Trust of Wyoming, with Agentic Trace LLC serving as trustee.

How the Recovery Trust Handles Claims

Victims can visit the trust’s website to search for their wallet addresses, track a submitted claim, and provide supporting evidence of ownership. Prior to this consolidation, the Digital Asset Recovery Trust, referred to as DART, had already revealed similar recovery efforts, stating that by Aug. 17 it, together with independent whitehat researchers, had rescued just over 50 BTC from vulnerable addresses, transferring the funds ahead of potential bad actors.

According to DART, recovered Bitcoin is deliberately kept separate from researcher-controlled or operational wallets. The process includes blockchain analysis, proof-of-ownership checks and sanctions screening before any assets get released. Funds tied to competing claims, sanctions restrictions or ongoing criminal proceedings may follow separate legal review — DART said attorneys from Steptoe’s national security practice advise the trustee on exactly these kinds of complications. Notably, the whitehat researchers involved in DART’s earlier recovery effort did not request a bounty, and DART indicated other vulnerable assets and possible recovery leads remained under review after its August count, leaving open the possibility that more Coldcard-linked funds could still enter the claims process.

Technical Cause and Impact of the Coldcard Exploit

The root of the entire incident is a firmware defect that caused certain Coldcard devices to generate wallet seeds using software randomness instead of dedicated hardware randomness — a flaw that made those seeds far easier to reconstruct offline. Coinkite’s own incident record traces the problem to a firmware integration error that routed seed generation through MicroPython’s Yasmarang pseudorandom generator rather than the intended hardware random number generator.

How the Seed-Generation Flaw Happened

Attackers didn’t need remote access to anyone’s physical wallet. Because the reduced randomness narrowed the range of possible private keys, they could search for and regenerate vulnerable keys entirely offline. Coinkite frames this as a firmware seed-generation failure rather than a takeover of the hardware itself. Independent technical research has traced the underlying weakness back to firmware changes dating from 2021, estimating that older Mk3 devices produced roughly 40 bits of effective entropy under the flawed conditions, while Mk4, Mk5 and Q models retained closer to 72 bits instead of their intended security level.

The exploit unfolded in waves starting July 30. Early estimates put the first wave of losses at roughly 594 BTC taken from around 500 wallets in about 25 minutes, according to earlier reporting. As tracking expanded to additional wallets and later attack waves, some estimates grew to as much as 1,816 BTC across more than 5,200 addresses. Coinkite’s current security status page does not publish one definitive total for all stolen Bitcoin, which is why estimates continue to shift depending on which waves and clusters analysts fold into their count.

Firmware Patch and Security Recommendations

Coinkite released emergency fixes on July 31, followed by further hardening through September. The current recommended standard firmware releases are Mk4/Mk5 version 5.6.2 and Q version 1.5.2Q, both issued Sept. 3; Edge users are pointed to versions 6.6.1X and 6.6.1QX respectively. These updates close the door on future vulnerable seed generation, but they cannot undo the damage already done to seeds created before the fix.

That’s the part Coinkite has been most direct about: installing the latest firmware does not change an existing seed. A wallet generated under the vulnerable firmware can remain exposed even after the device is fully updated, because the weakness lives in the seed itself, not just the software running the device. Anyone whose seed was generated before the patch is instructed to create a corrected replacement seed and migrate their funds — unless they meet Coinkite’s stated exception involving at least 50 fair, independent and privately recorded six-sided dice rolls, which the company says can add at least 128 bits of extra entropy. Users who are uncertain whether they meet that bar are told simply to migrate their funds to be safe.

FAQ

What caused the Coldcard wallet exploit?

A firmware defect caused Coldcard wallets to generate seeds using MicroPython’s pseudorandom number generator instead of the hardware RNG, leading to weakened seeds that were vulnerable to offline reconstruction.

How much Bitcoin has been recovered so far from the Coldcard exploit?

Whitehat operators have recovered and moved 52.37 BTC into a recovery trust, representing 2.8% of the exploit funds tracked by Galaxy Digital.

What should affected Coldcard users do to secure their funds?

They need to update to the patched firmware versions and generate new seed phrases using the corrected process, then migrate their funds away from any seed created before the fix.

What is the Crypto Recovery Trust and how does it operate?

It is a Wyoming statutory trust that holds recovered digital assets securely while verifying ownership claims and completing legal reviews before returning funds to rightful claimants.

Article produced with the assistance of artificial intelligence and reviewed by the editorial team.