Galaxy Digital Head of Research Alex Thorn said on September 21 that white-hat operators moved 52.37 BTC tied to the Coldcard exploit into a newly created address linked to the Crypto Recovery Trust.