White hat hackers have successfully secured 52.37 bitcoins, valued at over $4.5 million, by moving them from compromised Coldcard hardware wallets to a dedicated recovery trust. According to Alex Thorn of Galaxy Digital, these funds represent approximately 2.8% of the total assets affected by the recent security exploit involving Coinkite devices.
The security vulnerability originated from a firmware bug in Coldcard wallets that caused seed generation to rely on a weak software-based random number generator. This flaw allowed unauthorized parties to guess investor seed phrases. Coinkite confirmed that the issue went unnoticed for a period, with its potential impact increasing alongside subsequent product releases.
Galaxy Digital estimates that a total of 1,789.28 bitcoins, worth approximately $154.1 million, were lost due to the attacks that began on July 31. Nick Bax from Ump Labs, who participated in the recovery efforts, confirmed that the rescued funds are now held by a Wyoming-based trust, which aims to facilitate the return of assets to their rightful owners.
Following the discovery of the exploit, Coinkite advised users to update their device firmware or transfer their holdings to alternative storage solutions. Many investors have since moved their assets to other platforms, including cryptocurrency exchanges, to mitigate further risks associated with the hardware wallet vulnerability.
