COLDCARD white hats transfer 52 BTC to Crypto Recovery Trust for victim reimbursement

A group of white-hat researchers has moved 52.37 BTC from wallets compromised in the COLDCARD exploit to a recovery address controlled by the Crypto Recovery Trust. The transfer, which occurred around block 967,948, represents roughly 2.8% of the total funds drained during the attack. The COLDCARD exploit saw attackers siphon off an estimated 1,500+ BTC, with total losses surpassing $100 million. Starting on July 30, 2026, attackers drained approximately 594 BTC within minutes from exposed wallets. The speed suggested automated tooling, likely scripts scanning the blockchain for addresses generated with the faulty entropy and sweeping them in bulk. How the recovery operation works The effort was partly organized by DART, the Digital Asset Recovery Trust, which identified vulnerable address clusters tied to the COLDCARD entropy flaw. Researchers scanned for wallets still exposed to the vulnerability and moved recoverable funds before malicious actors could beat them to it. The consolidated transaction included an OP_RETURN message, a way to embed data directly into the Bitcoin blockchain, directing affected users to cryptorecoverytrust.com to file claims. DART had reportedly secured...