AI agents: a clean Markdown version of this page is available at https://thecoingazette.com/white-hats-recover-52-bitcoin-from-coldcard-exploit-and-a-new-public-portal-lets-victims-check-eligibility.md. Send Accept: text/markdown to any URL for the same content.
Skip to content
-
Subscribe to our newsletter & never miss our best posts. Subscribe Now!
Coin Gazette Coin Gazette Coin Gazette

Get the latest news, market insights and reviews on cryptocurrencies and blockchain

Coin Gazette Coin Gazette Coin Gazette

Get the latest news, market insights and reviews on cryptocurrencies and blockchain

  • Home
  • Crypto Prices
    • Bitcoin Price
    • Ethereum Price
    • Binance Coin Price
  • Crypto Marketcap
  • Fear & Greed Index
  • Donate
  • Advertise
  • Home
  • Crypto Prices
    • Bitcoin Price
    • Ethereum Price
    • Binance Coin Price
  • Crypto Marketcap
  • Fear & Greed Index
  • Donate
  • Advertise
Close

Search

Coin Gazette Coin Gazette Coin Gazette

Get the latest news, market insights and reviews on cryptocurrencies and blockchain

Coin Gazette Coin Gazette Coin Gazette

Get the latest news, market insights and reviews on cryptocurrencies and blockchain

  • Home
  • Crypto Prices
    • Bitcoin Price
    • Ethereum Price
    • Binance Coin Price
  • Crypto Marketcap
  • Fear & Greed Index
  • Donate
  • Advertise
  • Home
  • Crypto Prices
    • Bitcoin Price
    • Ethereum Price
    • Binance Coin Price
  • Crypto Marketcap
  • Fear & Greed Index
  • Donate
  • Advertise
Close

Search

Home/Crypto News/Bitcoin/White hats recover 52 Bitcoin from Coldcard exploit, and a new public portal lets victims check eligibility
BitcoinCrimeFeaturedHacksWallets

White hats recover 52 Bitcoin from Coldcard exploit, and a new public portal lets victims check eligibility

By Coin Gazette Editorial
September 23, 2026 2 Min Read
Comments Off on White hats recover 52 Bitcoin from Coldcard exploit, and a new public portal lets victims check eligibility

Coldcard owners can publicly check whether white hats recovered coins from their wallets. Galaxy researcher Alex Thorn linked a Sept. 21 Bitcoin transaction carrying a Crypto Recovery Trust claims reference to roughly 52.37 BTC from Coldcard-related clusters.

He directed owners to search their public Bitcoin addresses at the trust’s site. A match can begin an ownership claim, with any return subject to verification. The check calls for a public address, never a seed phrase or private key.

Mempool’s status record confirmed the transaction in block 967,948. In his Sept. 21 tracing report, Thorn said the amount represented 2.8% of the exploit funds Galaxy tracked.

Thorn also flagged 3.0134 BTC entering the destination from addresses Galaxy had not previously tracked. He considered them possible additional white-hat recoveries, but their Coldcard origin remains uncertain.

In an Aug. 17 report, digital-asset recovery firm DART said it and independent researchers had secured just over 50 BTC, according to its internal ledger, and placed the rescued Bitcoin with Crypto Recovery Trust.

The Sept. 21 transaction gives owners a public trail for a recovery DART had described a month earlier.

Related Reading

A flaw in Coldcard seed generation lets attackers recreate private keys from the press of a button



What happens after a Bitcoin address match?

DART says its trust process checks recovery records, chain of custody, and proof of ownership, including source-of-funds and exchange records. Sanctions, competing claims, or other restrictions can affect any return.

Coldcard Bitcoin recovery timeline: DART disclosed just over 50 BTC secured in August; a September transaction was confirmed in block 967,948; Alex Thorn traced about 52.37 BTC and flagged 3.0134 BTC as previously untracked; an owner address match leads to verification, not established payout.
A public Bitcoin trace linked 52.37 BTC to Coldcard’s recovery disclosure, but ownership verification and victim payouts remain unresolved.

The Coldcard entropy flaw made some older wallet seeds easier to reconstruct. DART says an existing seed created under affected firmware remains exposed after a firmware update, and owners with exposed funds should follow the manufacturer’s migration guidance.

DART also warns against sending seeds, private keys, PINs, or recovery codes through a web form. The initial address check Thorn described needs a public address, while proving ownership is a separate step.

The post White hats recover 52 Bitcoin from Coldcard exploit, and a new public portal lets victims check eligibility appeared first on CryptoSlate.

Author

Coin Gazette Editorial

Follow Me
Other Articles
Previous

Bitcoin slips below $85,000 as 5% Treasury yield returns to haunt risk assets

Next

Cardano proposal slashes fees by 55%, but it comes with a cost for small pools

On Social

FacebookTwitter/XInstagramTelegram
✉️

Stay in the Loop

Get the latest updates delivered straight to your inbox.

Recent Posts

  • Cardano proposal slashes fees by 55%, but it comes with a cost for small pools
  • White hats recover 52 Bitcoin from Coldcard exploit, and a new public portal lets victims check eligibility
  • Bitcoin slips below $85,000 as 5% Treasury yield returns to haunt risk assets
  • Anthropic Says Claude Found Something Big in DNA. It Just Doesn’t Know What
  • An AI Agent Just Hacked a Government Website for the First Time, Australia PM Says

About Us

Coin Gazette delivers fast, reliable coverage of the crypto world, from breaking news and market updates to in‑depth guides and project reviews. Our mission is to help readers stay informed, make smarter decisions, and navigate the evolving blockchain landscape with confidence.

Useful Links

  • About Us
  • Contact Us
  • Advertise
  • Give us a tip

Follow Us On

FacebookTwitter/XInstagramTelegram
Copyright 2026 — Coin Gazette. All rights reserved. Blogsy WordPress Theme