😮‍💨

as a shitpost that is funny but in reality it's not funny as an incredible amount of people are getting drained right now. some are probably noobs that used coldcard because people, including myself, told them it was 'industry standard' and battle tested. people are getting life saving drained. i would be devastated beyond comprehension.

which is a bad time because people will end up using exchanges more.

So if all you have for cold storage is coldcards I guess the move is to migrate to an exchange?

They exploit how the device generates the seed

What about multisig w/ mk4 or 5? Still a vulnerability?

time to add nostr keys to hardware wallets.

Is this something a firmware patch would fix? Or are all coldcard customers' devices good as a brick?

That's good to know. Mostly just curious from a general hardware wallet standpoint. Would've been beyond brutal if their customer base couldn't use their devices anymore.

You can move to the same seed with a passphrase temporarily, and to a seed generated by dice rolls more long-term.