Coldcard Exploit: White Hats Move $4.5M in Bitcoin
White-hat security researchers have transferred 52.37 BTC, worth more than $4.5 million, from wallets linked to the Coldcard exploit into the Wyoming-based Crypto Recovery Trust. The trust was established to return rescued funds to potential victims. Galaxy Digital research head Alex Thorn said the transfer included 3.0134 BTC from previously untracked addresses and represented about 2.8% of the estimated Coldcard exploit losses.
The Coldcard exploit began on 31 July after Coinkite disclosed a firmware flaw. The bug caused affected devices to use a weak software pseudorandom number generator instead of the hardware-based random-number generator when creating wallet seeds. This could allow attackers to guess seed phrases and steal Bitcoin.
Galaxy Digital estimates that 1,789.28 BTC, worth about $154.1 million, was lost in the attacks. An earlier estimate identified 1,830 BTC across 9,162 potentially affected addresses. SEAL 911 and Ump Labs responder Nick Bax said he helped rescue about 50 BTC that faced an imminent theft risk. Researchers also reportedly secured around 40% of the Bitcoin linked to the exploit’s second wave before attackers could seize it.
Coinkite has urged users to update their firmware or move funds away from affected devices. The Coldcard exploit remains a serious risk for affected holders and hardware-wallet confidence. The recovery transfer is positive for the rescued funds, but it is unlikely to create a direct Bitcoin price catalyst. Traders should watch for further thefts, recovery announcements and any selling by victims.
Neutral
The Coldcard exploit is primarily a wallet-security and fund-recovery event, not a change to Bitcoin’s network fundamentals or market demand. The transfer of 52.37 BTC to a recovery trust is positive for affected holders and reduces the amount immediately exposed to theft. It may also support confidence in white-hat intervention and coordinated recovery efforts.
However, the wider exploit remains significant, with estimates ranging from 1,789.28 BTC lost to about 1,830 BTC potentially linked to affected addresses. Additional thefts, forced selling by victims, or concerns about hardware-wallet security could create short-term negative sentiment. Those effects are likely to be limited relative to Bitcoin’s overall market size, while the recovery itself does not materially change supply, adoption or liquidity. The expected direct price impact on BTC is therefore neutral, although volatility could increase around new exploit or recovery disclosures.