Bitcoin Returned to Its Owner After the Coldcard Exploit

A completed owner return

The Crypto Recovery Trust has returned more than 20 BTC to an owner affected by the Coldcard exploit, after verifying the ownership claim.

Steptoe's September 24 announcement describes the return as $1.7 million and says the Trust announced it on September 23. Steptoe serves as counsel to the Trust.

The firm also reports that white hats had deposited approximately 50 BTC from the incident with the Trust. Work to identify other owners continues.

The work after a rescue

In our August report, DART described securing just over 50 BTC with independent white-hat researchers and coordinating a custody path through the Crypto Recovery Trust. That report focused on protecting exposed assets and preserving the evidence needed for the next stage.

For DART, a recovery operation needs a clear answer to what happens after funds are secured. The recovery record must connect the assets to the circumstances in which they were found. Custody must keep that property separate from operating funds. Ownership review must establish who is entitled to receive it.

Those responsibilities continue after the urgent technical work ends. A transfer into protective custody begins a process of investigation and return. The outcome that matters to an affected owner is regaining control of their property.

Resources for affected owners

The Crypto Recovery Trust website provides a public-address check and links to its claim process. An owner can check whether a complete public wallet address is available in the recovery process. The site does not publish a full wallet list, balances, or case details. Its Track Status feature lets claimants review a claim and submit additional evidence.

For funds still controlled by an affected seed, consult Coinkite's current security status and migration guide. Coinkite explains that updating firmware does not fix an existing affected seed. Its guide covers checking the applicable device and release track, preparing a new wallet, and verifying a migration. Keep recovery material private and use the manufacturer's current instructions.

The recovery record

Our earlier article explains the custody framework and DART's work with researchers. This update records a later outcome. Keeping both accounts available helps readers follow the work without confusing assets secured with assets already returned.