Wierd. https://www.edmunds.com/ram/1500-rev/

Dozens of credible reports of #Coldcard users having funds swept off of wallets, going back years. Many of these people reported the loss, but were blocked, gaslit, ignored etc. There needs to be a Class Action.

Getting a bit too big for his Size 7 Air Jordans. View quoted note →

The Security Research organisation #WalletScrutiny were unable to reproduce #Coldcard firmware builds in 2023. Rather than spending a few minutes to assist with a reproducible build, NVK mobbed them on Stacker News, attempting to trash their reputation with a very obvious torrent of muck-slinging. It is possible that the firmware on peoples Coldcards does not correspond with the published source code. https://stacker.news/items/197441

People moving Bitcoin off of a vulnerable Coldcard seed are exposed to a RBF sniping attack during the time between broadcasting the transaction, and the transaction being mined and added to the blockchain. This attack can be mitigated: - Wallets such as Electrum and Sparrow have a setting "Allow RBF / Replace By Fee". This should be set to OFF for extra protection. - Consider paying a slighter higher fee for the transaction; but not so high that the transaction stands out to potential attackers. - Consider submitting the transaction privately to a mining pool. This minimises exposuse of the vulnerable public key you are spending from. The MARA mining pool has a service called Slipstream; using this service will prevent your transaction from being more widely broadcast to mempools... but the tradeoff is that you will have to wait for the next MARA block. Also, your transaction will be visable to MARA pool members immediately. #Coldcard #Coinkite #RBF #RBFATTACK #NVK #COLDCARDSCAM

This! And for the price of small USB stick (although the metal premium metal Samsung ones dissipate heat excellently). View quoted note →

People should be aware that more than a couple of governments are paying bounties to private individials and organisations, in order to undermine crypto. Not sure if Coldcard saga is in this category.

Been reading snippets from people who've lost life savings. Most of them seem legit. People loosing to an engineering hoax like this is infuriating. I think there's a fair chance of this saga having a relatively happy ending as was the case with Mt Gox, although this may take a few years. People who have lost funds would be well advised to keep their physical Coldcard hardware device plus ALL packaging and any & all audit trails of their past transactions. Hopefully the funds can be traced or intercepted and re-imbersed. Decent chance I think.