CryptoSlate
A Sept. 21 Bitcoin transaction linked roughly 52.37 BTC to funds recovered from Coldcard-related wallet clusters, according to Galaxy researcher Alex Thorn. Mempool’s status record places the transfer in block 967,948, and Thorn said the amount represented 2.8% of the exploit funds tracked by Galaxy. A new Crypto Recovery Trust portal lets owners check affected public addresses.
Why it matters
A matching address can begin an ownership claim, but it does not guarantee a return. The trust says it will review recovery records, chain of custody and proof of ownership, including source-of-funds and exchange records. Sanctions, competing claims and other restrictions can also affect payouts.
The transaction provides a public trail for a recovery previously described by digital-asset recovery firm DART. DART said it and independent researchers had secured just over 50 BTC and placed the rescued Bitcoin with the trust. Thorn also flagged 3.0134 BTC entering the destination from previously untracked addresses, though their Coldcard origin remains uncertain.
Market impact
The recovery gives affected users a way to screen their public addresses without exposing sensitive wallet credentials. The initial check requires only a public Bitcoin address. Owners should not submit seed phrases, private keys, PINs or recovery codes through a web form.
The underlying Coldcard entropy flaw can leave older seeds exposed even after a firmware update. Owners with affected funds still need to follow the manufacturer’s migration guidance, while the recovery process moves through separate ownership verification before any Bitcoin is returned.
Frequently asked questions
-
How much Bitcoin was linked to the Coldcard recovery?
A Sept. 21 transaction linked roughly 52.37 BTC to Coldcard-related recovery funds. Galaxy researcher Alex Thorn said that represented 2.8% of the exploit funds tracked by Galaxy.
-
How can Coldcard owners check whether they may be eligible?
Owners can search their public Bitcoin addresses through the Crypto Recovery Trust portal. A match can begin an ownership claim, but it does not guarantee a payout.
-
What information is needed for the initial address check?
The initial check requires a public Bitcoin address. Users should not submit seed phrases, private keys, PINs or recovery codes through a web form.
-
Why might a claim not result in recovered Bitcoin being returned?
The trust must verify recovery records, chain of custody and proof of ownership. Sanctions, competing claims and other restrictions can affect any return.
-
Do affected Coldcard seeds remain vulnerable after a firmware update?
DART says an existing seed created under affected firmware remains exposed after an update. Owners with affected funds should follow the manufacturer’s migration guidance.
CoinDesk
WuBlockchain
Altcoin Daily