Whitehats Protect Stolen Bitcoin from Coldcard Attack
The recent Coldcard wallet attack saw over $100 million in Bitcoin losses across three waves. However, not all of the stolen funds were taken by thieves. A report from Galaxy Digital's Alex Thorn reveals that some of the affected wallets' contents were actually moved by whitehat operators, or ethical cybersecurity experts.
The transfer, which brought together 52.37 BTC from transaction traces labeled AA, AU, and AX, accounts for approximately 2.8% of the total tracked attack funds. According to Thorn, this figure reflects only the second wave of the attack and does not represent the share recovered across the entire event.
The additional funds were transferred to a recovery address linked to the Crypto Recovery Trust. The transfer itself does not mean that victims have been paid, but rather that their assets are being protected until they can be returned.