Owners of Coldcard hardware wallets are now able to verify if their Bitcoin was recovered by white hat hackers through a new online portal. This tool allows affected users to cross-check their public Bitcoin addresses against funds recently traced and publicly disclosed.
52.37 BTC Identified in Recovery Operation
Alex Thorn, head of firmwide research at the crypto investment company Galaxy, reported that a Bitcoin transaction dated September 21 involved approximately 52.37 BTC connected to wallets tied to Coldcard devices. The transaction included a reference for the Crypto Recovery Trust, a project established to facilitate the return of lost cryptocurrency through a structured claims process.
Thorn recommended that individuals potentially affected use the Crypto Recovery Trust website to check if their public Bitcoin addresses appear among the recovered funds. If an address matches, owners can initiate a claim, though the return of any assets will depend on strict verification processes.
The portal allows Coldcard users to search their public addresses for a match with the traced recovery funds, offering a potential path to reclaiming lost Bitcoin if ownership can be clearly proven.
The public portal only requires a user’s Bitcoin address to begin the search and does not request sensitive information such as seed phrases or private keys at any point.
Blockchain Tracking and Background of the Incident
Blockchain explorer Mempool confirmed that the traced transaction was included in block 967,948. Thorn noted in his report that the traced sum represented 2.8% of exploit funds previously tracked by Galaxy, indicating it is only a portion of the total amount that was vulnerable during the security incident.
He also noticed an additional 3.0134 BTC sent to the same address, which originated from sources not previously linked with the tracked exploit funds. These may represent separate recoveries, but Thorn stated their origin could not be confirmed as Coldcard-related.
This recovery is not the result of a new intervention. On August 17, digital asset recovery firm DART, a specialist in blockchain asset tracing and recovery, published a report stating its team and independent researchers had already secured slightly over 50 BTC. These assets, according to DART, were then placed with the Crypto Recovery Trust for safe and transparent management.
The September 21 transaction serves as a public record of the Bitcoin recovery first announced by DART in August, offering more transparency and a point of reference for owners seeking restitution.
Mini dictionary: DART (Digital Asset Recovery Trust) is a digital asset forensics and recovery company specializing in blockchain investigations, asset tracking, and consultancy for victims of cryptocurrency-related incidents.
Ownership Claims and Security Precautions
For those seeking their funds, DART explained that any claim will undergo multiple validation steps, including a review of recovery records, chain of custody, and proof of ownership such as exchange documentation or other source-of-funds evidence.
Verification also considers regulatory restrictions, sanctions, and possible competing claims before returning assets. The initial address check is just the first of several steps needed to claim the Bitcoin.
The recovery initiative stems from a technical flaw in certain older Coldcard devices, where insufficient entropy in wallet seed generation made it possible for attackers or white hats to recreate private keys for affected wallets. This vulnerability remains even after firmware updates if the wallet seed was originally created under the affected software version.
DART urged all affected Coldcard owners to follow official migration instructions issued by the manufacturer to secure future funds and strongly warned never to submit seed phrases, private keys, or PINs through any website or form.
Ownership checks and fund payouts to users in this Coldcard recovery are ongoing, and until all verification steps are completed, no coins will be distributed.
At the time this information was released, Bitcoin was trading near $83,370, marking a 3% decline over the last 24 hours.
The Coldcard recovery process is now publicly visible, and affected users can take action by searching their addresses to see if they qualify for asset return through the portal.
