Recovery Trust Returns More Than 20 Bitcoin After Coldcard-Related Incident, Advisers Say

A recovery trust returned more than 20 bitcoin to a verified owner, according to a 24 September 2026 statement from its legal adviser, Steptoe. The account describes a completed return following a Coldcard-related security incident, not an offer guaranteeing recovery to anyone who lost cryptocurrency.

Research checked: 26 September 2026. Reporting is based on the linked primary publication; analysis is identified in the text.

What the adviser reported

Steptoe says the Crypto Recovery Trust announced the return on 23 September, with the assets valued at about $1.7 million in its headline. Ownership was verified and the return carried no fee. Its account links the incident to a firmware issue affecting seed randomness and describes assets moved by white-hat researchers. These details are attributed to the adviser; this article has not independently examined the affected devices.

Why a software fix and a safe wallet are different

If the secret used to control funds has already become predictable or exposed, installing new software alone does not necessarily restore that secret’s security. The distinction matters when following official incident guidance: correcting a software defect and moving away from compromised credentials can be separate steps. Owners should establish whether their specific device and setup are affected, rather than infer exposure merely from a brand name.

Related context: TBJ’s coverage of the gap between disrupting an attack and securing a device.

Recovery claims need their own scrutiny

A public recovery story can attract impersonators. Never treat a message promising a similar outcome as proof that its sender represents the reported trust. Independently verify the organisation and instructions through official channels. A request for a seed phrase or private key would hand over control of the wallet. This reported return does not demonstrate that other losses are recoverable, or establish the balance of any individual claimant.

Sources and reporting scope

• Steptoe recovery statement

Prepared from public sources with AI assistance. No original interviews or independent product testing are claimed. Cover and inline visuals are AI-generated illustrations.