A total of 40.71 BTC linked to the Coldcard exploit was moved to a crypto recovery address. Galaxy Research said white-hat actors transferred the funds to an address linked to https://t.co/pJO0vBP0KF, raising questions about how the stolen Bitcoin was recovered.