Meta Force Space
BTC $85,943.00 +1.70% ETH $2,743.33 +0.91% SOL $116.78 +0.50% XRP $1.53 +2.48% BNB $787.11 +0.13% DOGE $0.0978 +5.00%
← Back to the news

White hats outrun Coldcard hackers in 52-Bitcoin evacuation

Written by Helen Partzstaff writerReviewed by Yohan Yunstaff editor
Written by Helen Partzstaff writer
Reviewed by Yohan Yunstaff editor
White hats outrun Coldcard hackers in 52-Bitcoin evacuation
Latest NewsPublishedSep 22, 2026

White hats secured about 40% of the Bitcoin moved in the Coldcard exploit’s second wave, transferring it to a Wyoming trust for victims.

White hats have transferred Bitcoin they rescued from wallets exposed by a Coldcard vulnerability to a trust set up to return the funds to victims.

A total of 52.37 Bitcoin was moved to an address controlled by Wyoming-based Crypto Recovery Trust, Galaxy Digital head of research Alex Thorn said in an X post on Monday. About 40% of the Bitcoin associated with the second wave was swept by white hats to protect victims’ funds.

Thorn said 3.0134 BTC included in the transfer came from addresses Galaxy had not previously tracked. He said the funds were presumably also rescued from wallets affected by the Coldcard flaw, but that Galaxy could not confirm their origin.

Security researcher and SEAL 911 incident responder Nick Bax said on Sept. 9 that he helped rescue about 50 Bitcoin at the end of July because the funds were “imminently going to be stolen” due to the Coldcard entropy flaw.

Source: Alex Thorn

Thorn cited a published total of 1,830 BTC across 9,162 addresses linked to the Coldcard vulnerability.

Potential victims can enter their wallet addresses on the Crypto Recovery Trust website to determine whether the trust controls their funds.

Thorn did not immediately respond to Cointelegraph’s request for comment.

Related: Coldcard third-wave attacker moves 45% of stolen Bitcoin

1 minute letter1 minute letter

Subscribe to daily byte-sized crypto news from Cointelegraph

Subscribe

More on the subject

Originally published by Cointelegraph on

Read the original on Cointelegraph ↗

Text and images are the property of Cointelegraph and are reproduced here with attribution and a link to the original publication.

More stories

All the latest news