Coldcard Hackers Route Funds Towards Crypto Recovery Effort

A recent transaction involving the Coldcard exploit has seen white-hat hackers move approximately $3.31 million in BTC towards a 'Crypto Recovery Trust'.

The transfer, which occurred on September 21, consisted of 40.71 BTC and carried an OP_RETURN message reading 'claims: cryptorecoverytrust.com'.

This marks a significant development in one of the year's largest self-custody disasters, where a firmware build error in Coinkite's Coldcard devices led to seed phrases being generated with too little randomness, making private keys guessable.

The exploit peaked at around $130 million and has seen some of the stolen Bitcoin remain dormant in attacker wallets for weeks.