Skip to main content
Live briefing · Decrypt

White-Hat Hackers Route Coldcard Exploit Bitcoin Into 'Recovery Trust'

What Decrypt reports, why it matters and what remains unconfirmed.

CryptoBy Decrypt Staff at Decrypt
Security visual for White-Hat Hackers Route Coldcard Exploit Bitcoin Into 'Recovery Trust'
Live briefing

The story in one view

Reported by
Decrypt
Coverage lens
Security and resilience
Published
Evidence status
Cross-source reports linked
01 / What happened

What Decrypt reports

Galaxy Research says white-hat actors consolidated coins tied to the exploit into a fresh address tagged for a "Crypto Recovery Trust," though the funds represent just 2.8% of the total haul.
02 / Why it matters

The immediate significance

The report describes direct security exposure for users, funds or software. The immediate significance is the potential harm; the confirmed scale and any protective action require technical or primary evidence beyond the publisher summary.

CoinDesk and Decrypt have also published a related report, providing another attributed account to compare without treating repetition as proof.

03 / Evidence gaps

What remains unknown

  1. The publisher summary does not contain the complete victim, transaction or technical evidence.
  2. The report does not establish the final loss or exposure, or whether remediation is complete.
  3. No matched primary document independently supporting the central claim is linked to this page.
Live market check

The named assets, right now

Spot quotes from Kraken, checked .

BTC / USDUS$86,384-0.25% over 24 hours
Developing Across Sources

How the story developed

CoinDesk and Decrypt are reporting related developments. Reports are shown in publication order; separate coverage is not independent confirmation.

The bigger picture

Related Articles And Podcast

Further reporting and analysis on this story.

Latest updates
Open the full live desk →