White Hats Recover 52 BTC from Coldcard Exploit to Crypto Recovery Trust

• •52.37 BTC recovered from Coldcard exploit transferred to Crypto Recovery Trust.
• •The exploit used weak software-based randomness, leading to over $100 million in losses.
• •Victims can verify if their funds are secured by the recovery trust.

On September 22, 2026, white-hat hackers transferred 52.37 Bitcoin linked to the Coldcard hardware wallet exploit to the Crypto Recovery Trust in Wyoming. This exploit, which began on July 30, 2026, exploited a firmware flaw that caused wallets to generate weak seeds, leading to over $100 million in losses across 1,816 BTC. The vulnerability resulted from a firmware integration error that used a software-based pseudorandom number generator instead of hardware randomness. Galaxy Digital reported that the transferred amount represents about 2.8% of the total tracked exploit funds. Victims can check if their wallets are affected via the trust's website. The recovery effort has been ongoing, with white hats securing a significant portion of the stolen funds before they could be accessed by attackers. The exploit has raised concerns about the security of hardware wallets and the need for users to migrate to new seeds.