Whitehats Move 52 Bitcoin From Coldcard Exploit to Recovery Trust
Security
Neutral

Whitehats Move 52 Bitcoin From Coldcard Exploit to Recovery Trust

Whitehats have transferred approximately 52 bitcoin from wallets linked to the Coldcard hardware wallet exploit to a recovery trust, according to Galaxy Digital. The funds are now held at an address bearing an OP_RETURN message directing claimants to cryptorecoverytrust.com.

Sep 22, 2026, 08:04 AM1 min read

Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work

Recovery Funds Moved to Trust Address

Whitehats have transferred bitcoin recovered from the Coldcard exploit to a dedicated recovery trust address. Galaxy Digital confirmed the move involved 52 BTC, though Crypto.news reported the figure as 52.37 BTC. The receiving address carries an OP_RETURN message reading "claim:cryptorecoverytrust dot com," signaling the next phase of the recovery process to affected users.

Claims Process Underway

The recovery trust will verify ownership claims from users whose funds were affected by the Coldcard exploit. Claimants are directed to the cryptorecoverytrust.com domain to initiate the verification process. The move marks a shift from active fund recovery on-chain to a custodial verification mechanism overseen by the whitehat group.

Why It Matters

For Traders

The recovery trust reduces risk that recovered funds will be liquidated unpredictably; claimants should verify their identity at cryptorecoverytrust.com to establish their stake.

For Investors

Institutional custody solutions like Coldcard remain a security target; this incident reinforces the need for tiered key management and insurance coverage for hardware wallet providers.

For Builders

Recovery trusts using OP_RETURN messaging and on-chain verification demonstrate a practical pattern for handling post-exploit asset redistribution at scale.

This article is for information only and is not financial advice. Read the full disclaimer.

Live prices:Bitcoin

Related Articles

Latest News