According to Galaxy Digital's Head of Research Alex Thorn, "whitehat operators" have moved 52.37 BTC to an address linked to a newly formed recovery trust (cryptorecoverytrust.com). This move is part of the ongoing efforts following the Coldcard hardware wallet exploit that began on July 30, which resulted in estimated losses of over $100 million in Bitcoin. The whitehats swept these funds to keep them safe until they could be returned to victims. The transaction was confirmed in block 967,948.