White hats moved 52.37 BTC tied to the Coldcard entropy flaw into a Wyoming recovery trust. About 1,816 BTC remains in attacker wallets across four theft waves.