Bitcoin Heist Thwarted: Ethical Hackers Recover $1.725 Million in Coldcard Fraud
A $1.725 million Bitcoin heist has been thwarted thanks to the efforts of ethical hackers and a team of lawyers from Edmonds Marshall McMahon (EMM). The funds, representing 100% of a client's loss, were recovered after a six-week process that involved tracing Bitcoin through CoinJoin transactions and verifying wallet derivation paths.
The Bitcoin was stolen as part of the Coldcard fraud on July 31, 2026, and the client suffered the largest loss within this particular recovery group. The team at EMM worked with the ethical hackers to establish the client's ownership of the Bitcoin, using a combination of legal analysis and forensic blockchain investigation.
The process required cryptographic proof of control, where the client signed messages using addresses associated with the unauthorized transactions, demonstrating control over the corresponding private keys. An independent legal review confirmed the client as the original owner, paving the way for the return of the Bitcoin.
Ashley Fairbrother, Partner and joint head of EMM's Crypto and Digital Asset Fraud practice, said, 'This case shows the transformative impact responsible white-hat activity can achieve when technical intervention is supported by a transparent legal framework.'