⏱ 2 min read
A traced Sept. 21 transfer creates a public claims path for Coldcard-affected users, but the tranche equals just 2.8% of funds Galaxy tracked.
A Sept. 21 Bitcoin transaction carrying a Crypto Recovery Trust claims reference moved roughly 52.37 BTC from Coldcard-related clusters, according to tracing by Galaxy researcher Alex Thorn. Mempool’s status record shows the transfer confirmed in block 967,948.
Thorn said the amount represents 2.8% of the exploit funds Galaxy tracked. As a calculation, 52.37 BTC at 2.8% implies Galaxy’s tracked total is on the order of 1,870 BTC. Thorn also noted 3.0134 BTC entering the destination from addresses Galaxy had not previously tracked—possible additional white-hat recoveries—but their Coldcard link remains uncertain.
This on-chain movement aligns with an Aug. 17 report from digital-asset recovery firm DART, which said it and independent researchers had secured just over 50 BTC and placed the funds with Crypto Recovery Trust. The Sept. 21 transaction provides a public trail for the recovery DART described a month earlier.
Thorn directed affected owners to search their public Bitcoin addresses on the Trust’s site. A match can initiate a claim, subject to verification. DART says the Trust process checks recovery records, chain of custody, and proof of ownership (including source-of-funds and exchange records). Sanctions, competing claims, or other restrictions can affect any return.
Context: DART has warned that the Coldcard entropy flaw made some older wallet seeds easier to reconstruct. It also says an existing seed created under affected firmware remains exposed after updating, and owners with exposed funds should follow the manufacturer’s migration guidance. The initial address check requires only a public address—never a seed phrase, private key, PIN, or recovery code—and proving ownership is a separate step.
Why this matters
Fact: there is now a verifiable on-chain tranche of recovered BTC tied to a public claims process. Analysis: the size—2.8% of Galaxy-tracked funds—suggests early progress but a long recovery tail. The binding constraints shift from pure technical recovery to attribution and compliance: matching addresses, substantiating provenance, and navigating any sanctions or competing claims.
▼ 2.59%
Limitations
The new transfer does not confirm outcomes for individual claimants. The origin of the additional 3.0134 BTC is uncertain, and the total scale of affected wallets, recovery timelines, and acceptance rates remain unclear.
What to watch next
– Additional transfers into the Crypto Recovery Trust linked to Coldcard-related clusters.
– The share of address checks that produce matches and pass verification.
– Further tracing reports from Thorn or other researchers clarifying sources of incoming funds.
– Manufacturer migration uptake among users with potentially exposed seeds.
This content is for informational purposes only and does not constitute financial advice.
🧠 HafidWatch Take
The recent 52.37 BTC transfer to the Crypto Recovery Trust marks a shift from speculation to on-chain evidence, providing Coldcard victims with a clearer claims path. However, this amount represents only 2.8% of the total funds tracked by Galaxy. The main challenges now lie in verifying ownership without compromising security and navigating compliance issues such as sanctions and competing claims. The true test will be whether additional BTC transfers occur and how many addresses successfully pass verification.
Daily crypto intelligence. Before the market opens.
Including the Divergence Index — the sentiment gap no other newsletter tracks. Free, every morning at 7:30am ET.
✓ Free forever · ✓ No spam · ✓ 50+ sources monitored
