Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC Galaxy Digital研究主管Alex Thorn指出，Coldcard钱包漏洞攻击的第二波浪潮中约40%为白帽行为
Alex Thorn追踪到52.37 BTC被分发至一个标记为新“加密恢复信托”的地址。这52.37 BTC在区块967,948中进入了一个全新的地址。
据Thorn所述，这笔资金来自第二波攻击中的硬币以及Galaxy称为Footprint AA、AU和AX的三个攻击者集群。资金已到达区块967,948中确认的新地址。
该交易附带了一条OP_RETURN备注，即嵌入在比特币交易中的简短消息，内容为“claim:cryptorecoverytrust dot com。”
Thorn估计这笔款项占已追踪漏洞资金的2.8%。同一笔交易还向相同的恢复地址发送了另外3.0134 BTC，此前无追踪记录。Thorn表示，这很可能是更多由白帽人士收回的Coldcard资金，但他将此链接标记为未确认。
作为其区块链监控工作的一部分，Galaxy Research还在9月21日检测到一笔相关的40.71 BTC转账，价值约331万美元。该交易包含11个地址、20个输入和480个输出，并同样包含了上述恢复信托的消息。
Alex Thorn在X平台发布的帖子显示，52.37 BTC已整合至Crypto Recovery Trust。
损失峰值接近1.3亿美元，源于2021年3月的固件缺陷
A white-hat person is a security researcher who uses an attacker's technology to seize exposed coins before criminals do. The outflow of funds from some victims 'wallets was rescue in nature, and the coins were temporarily stored until the owner showed up and claimed them. Most of the stolen bitcoins remain dormant and stored in the attacker's wallets.
Victims can visit cryptorecoverytrust.com to search for wallet addresses to see if funds have been safely withdrawn.
The Coldcard vulnerability began on July 30 and occurred in batches over the following days. Damage estimates range from more than $100 million to a maximum of about $130 million.
Statistics from earlier reports showed that approximately 1,816 BTC were stolen from more than 5,200 addresses, with a value ranging from US$114 million to US$116 million at the time. Some seeds generated by Coldcard firmware used software random number generators instead of the device's hardware generators, and attackers rebuilt these seeds offline to empty wallets.
Previous analysis traced the defect to a firmware change in March 2021. Although Coldcard maker Coinkite has since patched its firmware, using coins whose old seeds have been exposed remains risky.
