Trump Media Dumps $165M in Bitcoin as Coldcard Losses Hit $88M and FTX Pushes $900M to Creditors

Quick Take

Trump Media offloaded 2,628 BTC ($165M) through Crypto.com, reducing its holdings to 4,261 BTC after seven months of systematic selling
Coldcard wallet breach expanded to 1,367 BTC ($88.6M) in losses across 4,585 compromised addresses due to a seed generation vulnerability
FTX initiated its fifth distribution, pushing $900M to former users and bringing total estimated recovery to $11B since the 2022 collapse
Bitcoin small-value transfers spiked to 39,600 BTC in a single day—levels not seen since the FTX bankruptcy filing in November 2022

What Happened

Trump Media Continues Seven-Month Bitcoin Exit

Trump Media & Technology Group—the entity operating the Truth Social platform—transferred another 2,628 Bitcoin to the Crypto.com exchange, valued at approximately $165 million at the time of movement. This transaction represents the latest in a sustained liquidation campaign that began seven months ago.

According to blockchain analytics firm Lookonchain, Trump Media originally acquired 11,542 BTC at an average purchase price of $118,522 per coin—a total initial investment exceeding $1.3 billion. The company has since sold 7,281 BTC over the seven-month period, generating roughly $545 million in proceeds at an average exit price of $74,855 per Bitcoin.

The sales represent a significant loss relative to the acquisition cost. Blockchain intelligence platform Arkham indicates the company retains 4,261 BTC worth $269.8 million at current market rates.

The Bitcoin movements coincided with Trump Media's launch of "Truth API," a premium data service offering real-time access to posts from President Trump on Truth Social. Pricing for the service reaches as high as $100,000 per month for enterprise clients seeking direct, licensed feeds of platform content.

Coldcard Wallet Security Flaw Exposes $88.6M in Bitcoin

Galaxy Research, the analysis division of Galaxy Digital, traced 1,367 BTC ($88.6 million) in losses to a vulnerability affecting Coldcard hardware wallets. The research identified 4,585 distinct addresses compromised by the security flaw.

The incident stems from a seed generation defect that reduced the randomness used in creating wallet recovery phrases. This weakened entropy made certain private keys mathematically predictable, allowing attackers to systematically discover and drain affected wallets.

The discovery follows unusual on-chain activity patterns. CryptoQuant head of research Julio Moreno documented that Bitcoin transfers below 1 BTC surged to 39,600 BTC on Friday—the highest daily volume for small-value movements since November 16, 2022, just days after the FTX bankruptcy filing. That earlier peak reached 39,900 BTC. Moreno interpreted the recent spike as retail users "taking action" to secure their holdings in response to the Coldcard revelations.

FTX Distributes $900M in Fifth Creditor Payout

The FTX Recovery Trust initiated its fifth distribution to former exchange users, releasing $900 million through partners including Kraken, BitGo, and Payoneer. Former FTX customer Sunil Kavuri confirmed receipt of funds after notifications went out the prior week.

This payout brings the estimated total recovery to approximately $11 billion since FTX filed for bankruptcy protection in November 2022. The exchange collapsed following revelations that executives misappropriated customer deposits, leading to criminal convictions for multiple leadership figures.

Former CEO Sam Bankman-Fried and ex-FTX Digital Markets co-CEO Ryan Salame remain incarcerated, while former Alameda Research CEO Caroline Ellison completed her sentence earlier in the year.

In related legal proceedings, a U.S. bankruptcy judge recently permitted the FTX estate to pursue a $1.76 billion clawback claim against Binance and its former CEO Changpeng Zhao, though broader damages claims were rejected.

Why It Matters

Implications for Markets and Security

Corporate Bitcoin Strategy Under Pressure: Trump Media's sustained liquidation—selling at an average price 37% below its cost basis—illustrates the challenges companies face when Bitcoin holdings become balance-sheet liabilities during extended price weakness. The company's experience may influence other corporate treasurers evaluating Bitcoin allocation strategies.

Hardware Wallet Trust Crisis: The Coldcard vulnerability exposes critical flaws in devices marketed as the most secure method for cryptocurrency storage. A seed generation defect—affecting the foundational randomness required for cryptographic security—undermines confidence in hardware wallet manufacturing quality controls. The $88.6 million loss demonstrates that "cold storage" security depends entirely on implementation rigor.

Bankruptcy Recovery Benchmark: FTX's estimated $11 billion in total distributions sets a precedent for crypto exchange bankruptcy proceedings. The recovery rate—representing a substantial portion of frozen assets—contrasts with historical expectations for financial collapses and may inform regulatory frameworks for exchange reserve requirements and custodial obligations.

Retail Behavior Signals: The surge in small Bitcoin transfers to levels last seen during the FTX collapse itself suggests retail investors are actively moving funds in response to security concerns. This "flight to safety" behavior could impact exchange liquidity and trading volumes if users shift toward self-custody or perceived-safe platforms.

The Numbers

2,628 BTC Sold by Trump Media

4,261 BTC Holdings Remaining

$88.6M Coldcard Losses

$900M FTX Payout (Round 5)

Trump Media Bitcoin Position

0 3,000 6,000 9,000 12,000 BTC

11,542 7,281 4,261

Purchased Sold (7 mo) Remaining

Avg: $118,522 Avg: $74,855 ≈$269.8M

Methodology & Data Sources

Bitcoin holding and transaction data sourced from Lookonchain and Arkham Intelligence blockchain analytics platforms. Price calculations represent values at the time of reporting. Average purchase and sale prices calculated across the full transaction history as reported. Coldcard loss estimates compiled by Galaxy Research through wallet address clustering and on-chain analysis. FTX distribution figures represent cumulative payouts as reported by the FTX Recovery Trust and confirmed by creditor notifications.

Market Context

The convergence of these three developments occurred during a period of heightened attention to corporate Bitcoin holdings and exchange security practices. Trump Media's selling pressure—adding 2,628 BTC to market supply—represents a notable volume given current trading conditions, though the transactions were executed through an exchange rather than over-the-counter desks.

The spike in small Bitcoin transfers to 39,600 BTC—just 300 BTC below the FTX collapse peak—suggests retail investors responded to the Coldcard security disclosure with immediate action. This transfer volume indicates users moving funds between wallets or exchanges, behavior typically associated with security incidents or platform trust erosion.

Moreno from CryptoQuant characterized the activity as Bitcoin holders "taking action," noting that such sustained small-value transfer volume had not occurred since November 2022. The pattern suggests a diffuse, retail-driven response rather than concentrated institutional movements.

⚠️ Context Note: No specific Bitcoin price movements or market cap changes were provided in the source material for the dates in question. General market reaction details are limited to transaction volume patterns and transfer behavior as documented by analytics platforms.

What's Next

Trump Media Holdings

With 4,261 BTC remaining, Trump Media's continued liquidation strategy will determine whether the company exits its Bitcoin position entirely or maintains a reduced allocation. The company's new Truth API service launch suggests potential alternative revenue streams that may influence treasury management decisions.

Coldcard Remediation

The identification of 4,585 compromised addresses creates an immediate need for Coldcard manufacturer response, including software patches, user notification protocols, and potential restitution frameworks. Users of affected wallet firmware versions face decisions about fund migration and hardware replacement.

FTX Recovery Process

The FTX Recovery Trust's fifth distribution leaves additional creditor claims pending resolution. The approved $1.76 billion clawback claim against Binance and Changpeng Zhao represents a significant outstanding asset that could fund future distributions if successfully recovered. The timeline for remaining payouts depends on ongoing liquidation of FTX estate holdings and resolution of legal claims.

Regulatory Implications

The hardware wallet vulnerability may prompt regulatory scrutiny of cryptocurrency storage device certification and testing standards. Exchange reserve proof requirements could tighten further as the FTX recovery progresses and establishes precedents for creditor protections.

Background: Why Hardware Wallets Can Fail

Hardware wallets generate private keys using random number generators (RNGs) to create seed phrases—typically 12 or 24 words that represent the mathematical key to a Bitcoin wallet. Cryptographic security depends on true randomness in this generation process. If the RNG has reduced entropy (insufficient randomness), the range of possible seed phrases shrinks, making it computationally feasible for attackers to systematically test combinations until they discover valid private keys. The Coldcard incident demonstrates that even "cold storage" devices marketed as maximally secure can harbor implementation flaws that undermine their core security promise.

Frequently Asked Questions

Why is Trump Media selling Bitcoin at a loss?: Trump Media purchased 11,542 BTC at an average price of $118,522 but has been selling at an average of $74,855—representing a 37% loss per coin. Companies may liquidate crypto holdings for various reasons including treasury management needs, operational cash requirements, or strategic shifts away from digital asset exposure. The timing coincides with the launch of their Truth API service, which may require capital allocation or reflect revised balance sheet priorities.
How did the Coldcard wallet vulnerability work?: The vulnerability involved a seed generation bug that reduced the randomness (entropy) used to create wallet recovery phrases. With less randomness, the number of possible private keys decreases, making it computationally practical for attackers to systematically test combinations and discover valid keys. This allowed unauthorized access to 4,585 addresses containing 1,367 BTC. The flaw affected specific firmware versions of the Coldcard hardware wallet.
Will FTX users get all their money back?: The FTX Recovery Trust has distributed an estimated $11 billion across five payout rounds, with the latest distributing $900 million. Whether full recovery occurs depends on the total value of remaining FTX estate assets, ongoing liquidations, and successful prosecution of clawback claims such as the approved $1.76 billion claim against Binance. Recovery percentages vary by creditor class and claim type under the bankruptcy framework.
Why did small Bitcoin transfers spike to 2022 levels?: Transfers below 1 BTC reached 39,600 BTC on Friday—the highest since the FTX collapse in November 2022. This pattern indicates retail holders moving funds between wallets or exchanges, typically in response to security concerns. The timing suggests users reacted to the Coldcard vulnerability disclosure by relocating their Bitcoin to addresses or platforms they consider safer, a behavior pattern consistent with previous security incidents.
Are hardware wallets still safe to use?: Hardware wallets remain among the most secure options for cryptocurrency storage when properly manufactured and implemented. However, the Coldcard incident highlights that no device is immune to implementation flaws. Users should verify they're running the latest firmware, check manufacturer security advisories, consider using multiple wallet brands for large holdings (diversification), and test recovery procedures with small amounts before committing significant funds to any single device.

Source Information

This report is based on news content published by Cointelegraph. Blockchain transaction data sourced from Lookonchain and Arkham Intelligence analytics platforms. Coldcard loss estimates compiled by Galaxy Research. On-chain transfer volume data from CryptoQuant. FTX distribution confirmations from creditor reports and Recovery Trust notifications.