COLDCARD Here’s a not-so-small development in this matter: a white-hat research team has moved 52.37 BTC from the wallets involved in this vulnerability to a recovery address controlled by the Crypto Recovery Trust, preparing to go through the victim compensation process. First, the scale: this portion accounts for only about 2.8% of the total funds transferred out in this attack.
According to the disclosure, the amount stolen in the incident exceeds 1,500 BTC, with total losses of more than $100 million. Starting July 30, the attacker transferred about 594 BTC out of the exposed wallet(s) within a matter of minutes—extremely fast—suggesting it was likely scripted and batch-automated sweeping of the compromised addresses to empty them.
The significance of this recovery effort is that it’s not just post-incident tracking. Instead, the white hats first identified a cluster of vulnerable address(es) associated with the COLDCARD entropy flaw, then moved the funds that were still possible to save before the malicious party could get there first. This may not directly catalyze the market, but it is a concrete reminder for wallet security, custody processes, and users’ confidence.
What’s even more worth watching next is two things: first, whether more recoverable funds will be transferred into the recovery address; and second, whether the compensation claiming mechanism can be implemented clearly and smoothly.
According to the disclosure, the amount stolen in the incident exceeds 1,500 BTC, with total losses of more than $100 million. Starting July 30, the attacker transferred about 594 BTC out of the exposed wallet(s) within a matter of minutes—extremely fast—suggesting it was likely scripted and batch-automated sweeping of the compromised addresses to empty them.
The significance of this recovery effort is that it’s not just post-incident tracking. Instead, the white hats first identified a cluster of vulnerable address(es) associated with the COLDCARD entropy flaw, then moved the funds that were still possible to save before the malicious party could get there first. This may not directly catalyze the market, but it is a concrete reminder for wallet security, custody processes, and users’ confidence.
What’s even more worth watching next is two things: first, whether more recoverable funds will be transferred into the recovery address; and second, whether the compensation claiming mechanism can be implemented clearly and smoothly.