White hats recover 52 Bitcoin from Coldcard exploit, and a new public portal lets victims check eligibility

According to CryptoSlate, white hat researchers have recovered approximately 52.37 Bitcoin following a Coldcard exploit. A new public portal allows Coldcard owners to check their public Bitcoin addresses against these traced recovery funds to begin the reclamation process.

Galaxy researcher Alex Thorn linked a Sept. 21 Bitcoin transaction, confirmed in block 967,948, to roughly 52.37 BTC from Coldcard-related clusters. Thorn noted this amount represents 2.8% of the exploit funds tracked by Galaxy and pointed owners to the Crypto Recovery Trust site for address searches. Digital-asset recovery firm DART previously disclosed securing just over 50 BTC in August and placing the rescued funds with the trust, meaning the September trace represents the public trail for that prior recovery.

A matching public address initiates an ownership claim, though returns remain subject to verification of recovery records, chain of custody, and proof of ownership. DART warned that seeds created under affected firmware remain exposed even after updates, urging users to follow manufacturer migration guidance and never share private keys or seed phrases via web forms.