Purported white hats returned 3,400 BTC to Liquid's federation wallet, but roughly 598.5 BTC remained outstanding without a publicly confirmed bounty agreement. Galaxy Research tracks further movements of bitcoin stolen in the Coldcard exploit. Ledger, Trezor, Foundation, AnchorWatch and SEAL Org back coordinated vulnerability disclosure as AI accelerates bug discovery. We examine the difference between protecting users and moving their money without permission. https://www.btcbreakdown.com/p/issue-645