🚨 From a deeply technical friend who absolutely knows what is going on. Take this deadly seriously.
Login to reply
Replies (67)
The problem affects single-sig wallets generated by the ColdCard from March 2021 onwards.
Defenses include:
- Roll your own seed words offline
- Add entropy to seeds (dice)
- Use a passphrase (25th word)
- Use multi-vendor multisig
While it’s fine to change vendors, just changing vendors but sticking to single sig doesn’t protect you from future vulnerabilities like this being discovered.
The single, fastest, easiest mitigation is to roll a new seed with your own entropy and sweep your coins into it.
How long until the same vulnerability is found elsewhere??
Still have a big chunk of my stack on a single sig trezor, will add a passphrase and move the funds asap
How do we know there will be no such vulnerabilities found in other wallets?
I bet 90% of people use single sig.
We’re fucked
Exactly the average pleb is a single sig maxi!
Their entropy is 32 bit instead of 256
Please be proactive and warn your normie friends guys
I think @ODELL tempted faith shitting on MSTR and "fake" bitcoin everyday while shilling coldcard. He forgot the "stay humble" part.
Thanks HODL 🙏🏻
Do you know if it you need to update coldcard firmware to safely move bitcoin to another wallet? Or does it not matter
If my funds where stolen I would be on plane to find cold card team.
No, the problem was in the generation of existing seed. It shouldn’t matter now.
So we cant even trust cold storage in a hardware wallet now?
We are fucked
Not sure what relay I need to be on, but I can’t see the message you’re replying to.
I’m on primal iPhone app . American hodls coldcard warning post
The security of your Bitcoin rests on the entropy in your seed. For this reason, I advocate rolling your own seed without trusting any device to do that for you.
There are different methods for doing this. You can cut out all 2048 words, jumble them in a hat, and pull words out one at a time.
Or you can flip a coin 128 or 256 times and convert those flips into seed words (there’s a 1-to-1 mapping between 11 coin flips and a BIP-39 seed word).
Personally, I prefer to deal words using a regular pack of playing cards. I developed a system for this. All you have to do is print out the lookup table, then shuffle and deal two cards. Each two-card tuple yields one seed word.
For example, drawing the eight of spades then nine of diamonds yields “celery”.
RIP NVK
I wonder if theres an exchange with a multi-sig where the majority of the devices are cold cards and they get cooked in all of this
Are you saying self custody is dead? Have Bitcoiners lost the plot?
For sure
You can roll your own dice
Correct
Unlikely. Exchanges aren’t using cold cards for their keys
One of the worst days of my adult life yesterday. Myself (and hundreds others) lost 7+ years of stacking n getting off of fiat, and trusting a respected hardware wallet. It was single digits but that was my retirement. I don’t put blame or hate on anyone. I’m just venting cuz I’m the lonely bitcoiner in my group of friends. Sold my stocks to stack, got laid off recently and soon to be stay at home dad for a bit. My bitcoin journey took an abrupt end. I still believe in it no doubt, but my god this hurts deep… Godspeed to everyone else affected 🙏😭🤮
Nunchuk used a coldcard mk4 for their assisted muktisig keys. I got an email from them about it and will need to rotate.
10 years. That’s what I lost in a second last night. Future savings of 4 children and one more on the way. All gone.
My reputation here on primal is none but I have been around for years in The Sovereign Bitcoiner. 
I woke up this morning to a message from a friend. Ran out of bed to pull up the wallet. 3:34am the time it all disappeared.
My kids will never know. Or at least for a long while. They were stolen a different bigger future. 💔
Telegram
The Sovereign Bitcoiner
"We are at war with them. They do not want us to do what we are doing and so fuck it, if its war.. lets get the battle gear on and use the tools th...
No words. I am so sorry.
I am so sorry brother
Had you a done a pass phrase or dice roll at set up ? Very sorry to hear this
Sorry man. A lot of us are doing this for the future benefit of our kids in this fiat world and this has been so cruel to good people.
They will know, they will feel the intention and learn sovereignty by social osmosis—that’s the bigger picture and a win by any name.
Sorry man. Let yourself mourn for the proper time, then onward.
Sorry man. 🫂
🫂🫂🫂
What's an example of a weak vs strong passphrase?
Less than 16 alphanumeric values could be considered weak. Live and learn
This is absolutely terrible
😭fuck man 😢😢😢
So sorry 🫂
Was Odell swept?
Plane to where?
Sorry to hear. This just sucks.
You will earn it back. Don’t give up.
Holy hell. Sorry
The people who are going to do that can fit into one phone booth.
deep inside ur rectum u can surely feel it
I am so sorry. What happened was terrible. I don’t want to give a false sense of hope but please hold onto the Coldcard for the small chance that the attacker is caught and the stolen funds are recovered. The engineers at Block found some interesting patterns in the attacker’s behavior that could possibly lead to their identity.
I can't thank myself enough for getting started. Despite the economic situation, I'm so happy to see €78,000 in returns from a €15,000 short-term investment with pjtradinghub. His videos are top-notch and highly educational, giving you real insights to achieve your goals and come out from debt! For a guide to a professional trader, I highly recommend everyone check out his Telegram 👉 "pjtradinghub"
Not seeing any confirmation that other hardware devices are safe as of now? If one used a non CC generated seed phrase, what level of panic of appropriate?
Fuck… I’m sorry this happened to you…
I can't thank myself enough for getting started. Despite the economic situation, I'm so happy to see €78,000 in returns from a €15,000 short-term investment with pjtradinghub. His videos are top-notch and highly educational, giving you real insights to achieve your goals and come out from debt! For a guide to a professional trader, I highly recommend everyone check out his Telegram 👉 "pjtradinghub"
I’ve been exploring different perspectives in the crypto space, and I’ve come across Paul Jon's content a few times. What stands out to me is his focus on risk management and staying patient rather than chasing quick profits. I don’t think there’s a single ‘perfect’ approach to trading, but it’s useful to learn from different viewpoints and then build your own strategy over time. Some of his ideas seem practical, especially for people who are still trying to understand market behavior. At the end of the day, everyone has to test what works for them and stay consistent. The market is always changing, so having a balanced mindset and being open to learning is probably more important than following any one method blindly. Just sharing my thoughts based on what I’ve seen so far.”
Where to find him
Telegram 👇
"Pjtradinghub"
I’ve been exploring different perspectives in the crypto space, and I’ve come across Paul Jon's content a few times. What stands out to me is his focus on risk management and staying patient rather than chasing quick profits. I don’t think there’s a single ‘perfect’ approach to trading, but it’s useful to learn from different viewpoints and then build your own strategy over time. Some of his ideas seem practical, especially for people who are still trying to understand market behavior. At the end of the day, everyone has to test what works for them and stay consistent. The market is always changing, so having a balanced mindset and being open to learning is probably more important than following any one method blindly. Just sharing my thoughts based on what I’ve seen so far.”
Where to find him
Telegram 👇
"Pjtradinghub"
You either need two decks or you reshuffle after drawing the first card. Do NOT mix the two decks!
Reshuffle after every word.
Honestly, rolling dice is a lot easier to not get wrong. Easiest to comprehend is coinflip.
Wow. Really sorry to hear that. I hope you able to stack even more in the coming years.
guess your children are happy you "got off fiat" AND bitcoin 🤣 disgusting fiat you need now huh? #asknostr
Sorry to hear this. Head up x
I’ve been there as well. So sorry. It’s absolutely terrible.
So sorry to hear this.
Danny P, you are not alone, have also experienced loss many years ago due to my bad judgement, and yes, it freaking hurts, still have moments of despair, and when that time comes, I just start praying, whether the losses are ever recouped or not, or whether the criminals are ever caught or not. My friend, just keep praying for peace and salvation. May I suggest the Bible? Start in the book of Psalms, in the Old Testament, has really blessed me in times of trouble. God bless you, sir!
Danny P, you are not alone, have also experienced loss many years ago due to my bad judgement, and yes, it freaking hurts, still have moments of despair, and when that time comes, I just start praying, whether the losses are ever recouped or not, or whether the criminals are ever caught or not. My friend, just keep praying for peace and salvation. May I suggest the Bible? Start in the book of Psalms, in the Old Testament, has really blessed me in times of trouble. God bless you, sir!
Thanks brother. I know what’s truly important in life (family and first born coming this month!) but man does it hurt. It will take some time for this would to heal, but heal it will 🙏
💔🙏🏻
@Danny P seven years of stacking gone and you are still not blaming anyone. that says a lot.
This post saved my bacon. Thanks Hodl.