White-Hat Hackers Route Coldcard Exploit Bitcoin Into 'Recovery Trust'
What Decrypt reports, why it matters and what remains unconfirmed.

The story in one view
- Reported by
- Decrypt
- Coverage lens
- Security and resilience
- Published
- Evidence status
- Cross-source reports linked
What Decrypt reports
Galaxy Research says white-hat actors consolidated coins tied to the exploit into a fresh address tagged for a "Crypto Recovery Trust," though the funds represent just 2.8% of the total haul.
The immediate significance
The report describes direct security exposure for users, funds or software. The immediate significance is the potential harm; the confirmed scale and any protective action require technical or primary evidence beyond the publisher summary.
CoinDesk and Decrypt have also published a related report, providing another attributed account to compare without treating repetition as proof.
What remains unknown
- The publisher summary does not contain the complete victim, transaction or technical evidence.
- The report does not establish the final loss or exposure, or whether remediation is complete.
- No matched primary document independently supporting the central claim is linked to this page.
The named assets, right now
Spot quotes from Kraken, checked .
How the story developed
CoinDesk and Decrypt are reporting related developments. Reports are shown in publication order; separate coverage is not independent confirmation.
CoinDesk Binance probed by U.S. federal prosecutors for sanctions violations: Bloomberg
Federal prosecutors in Manhattan and the Justice Department are said to be investigating whether the crypto exchange knowingly permitted users to bypass U.S. sanctions on Iran.
CoinDesk Next for the U.S. SEC: Agency's chief crypto counsel illuminates path for custody
Taylor Lindman, the top lawyer on the agency's Crypto Task Force, says the SEC is trying to get firms comfortable with blockchain technology and crypto assets.
DecryptCurrent briefing White-Hat Hackers Route Coldcard Exploit Bitcoin Into 'Recovery Trust'
Galaxy Research says white-hat actors consolidated coins tied to the exploit into a fresh address tagged for a "Crypto Recovery Trust," though the funds represent just 2.8% of the total haul.
Decrypt Inside Coinbase’s $250 Billion Playbook for Post-Quantum Bitcoin Custody
Head of cryptography Yehuda Lindell says the exchange is designing custody that can adapt to whatever post-quantum signing scheme Bitcoin adopts.
CoinDesk Crypto market structure can't wait for shot at post-election Clarity Act surge: White House
White House and U.S. Treasury officials agree that despite some hope that Congress' "lame duck" session could see the bill again, the work's in regulators' hands.
CoinDesk Democrats 'chose visceral hatred for' Donald Trump over crypto Clarity Act, Lummis says
Senator Cynthia Lummis said the crypto industry should "pin it on the Democrats" in her first public remarks after last week's failed Clarity Act vote.
Related Articles And Podcast
Further reporting and analysis on this story.
The Hacker Who Created 46 Billion Bitcoin From Nothing
Bitcoin has one rule almost everybody knows: there will never be more than 21 million BTC .
Read the notes and play the episode