White hats moved 52.37 bitcoin from hacked Coldcard signing devices to an address apparently controlled by Crypto Recovery Trust, according to Galaxy Digital’s Alex Thorn. According to NS3.AI, Thorn said the transfer was intended to protect potential victims and accounted for 2.8% of the Coldcard exploit.

Galaxy Digital said 1,789.28 bitcoin were lost in the attacks.