White-Hat Hackers Route Coldcard Exploit Bitcoin Into 'Recovery Trust'
60-second summary
White‑hat hackers have moved Bitcoin stolen in the Coldcard exploit to a newly created address labeled a “Crypto Recovery Trust,” according to Galaxy Research, consolidating roughly 2.8 % of the total illicit haul. The modest share suggests most funds remain dispersed, but the coordinated recovery effort signals increased vigilance and could pressure further exploit mitigation across hardware‑wallet ecosystems.
Galaxy Research says white-hat actors consolidated coins tied to the exploit into a fresh address tagged for a "Crypto Recovery Trust," though the funds represent just 2.8% of the total haul.