I traced Wave 1 of the Coldcard drain from the weak firmware RNG to 1,195 victim addresses, reconstructed 328 seeds covering 949.7 BTC, and found clues in the attacker’s sweep code. The final 153 addresses remain unexplained.

Inside Wave 1: Tracing the Attacker’s Steps Through the 1,082 BTC Coldcard Drain | Praveen Perera

A forensic reconstruction of the 1,082 BTC Coldcard Wave 1 drain, the weak seed path behind it, and the 153 addresses that remain unexplained

Cove 1.3.0 Beta is available on TestFlight and Google Play Open Testing. The biggest feature is the new Passkey based Cloud Backup and restore. Onboarding and multi account import is also very cool. Full CHANGELOG ### Onboarding - New setup flow for people creating their first wallet, importing an existing wallet, or restoring Cove - Cove can now look for an existing Cloud Backup during setup - New restore screens explain when a backup is found, unavailable, skipped, failed, or complete ### Cloud Backup - Brand-new Cloud Backup support in 1.3.0 - Back up Cove using iCloud Drive on iOS or Google Drive on Android - Restore wallets with a passkey after reinstalling Cove or setting up a new phone - View backup status, sync progress, passkey issues, and cloud access problems from Settings - Disable or delete Cloud Backup when you no longer want it enabled ### Wallet View - Wallets now show scan progress while Cove checks transaction history - Balances and transactions can appear before the full scan finishes - Incoming unconfirmed funds are shown more clearly - Scanning is faster and more reliable after retries, cancellations, or connection changes ### Receive - Receive now keeps the same address for 5 minutes unless it gets used - Cove watches the current receive address for incoming payments - The receive screen shows when payment activity is detected - Cove warns before copying an address that has already received funds ### Multi-Account Support - Cove can now import separate wallets that use different Bitcoin account numbers - Duplicate wallet detection now understands account numbers instead of treating every matching fingerprint as the same wallet - Non-default account numbers are shown in wallet settings - Wrapped SegWit, legacy, and no-fingerprint wallet imports are handled more accurately - Cloud Backup and restore use the improved wallet identity checks too ### Send - Amount entry is stricter about unsafe pasted text, such as addresses or wrong unit labels - Hardware send and PSBT handling received reliability fixes ### Settings and Security - New About screen with version, build, commit, and feedback details - Local wallet data now uses stronger encrypted storage - Seed phrase and sensitive backup screens have stronger screenshot protection on Android - Settings now show clearer Cloud Backup, wallet, and security status messages ### Reliability and Polish - Updated wallet engine to BDK 3.0.0 - Better startup recovery if migration or restore is interrupted - More consistent status colors and UI polish across iOS and Android

Vote on what Cove builds next

Cove

Cove - The simple bitcoin only mobile wallet

Cove is a Bitcoin only mobile wallet that is simple to use, but feature rich.