Replies (59)
Nice reminder of why we generate our own entropy.
Stay safe out there.
@semisol any thoughts on this?
Also, don't do anything rash.
I might know why this is happening but it is a guess. I would in general avoid almost every HWW on the market today due to repeating the same structural flaws
You think it’s actually happening?
I would say there is a chance, but still not a big one.
I’m scared to check
View quoted note →For what it’s worth 🤷🏻♂️
If that was the case, wouldn’t the exploit have happened years ago?
Coldcard MK3s have been around for ages
An exchange wallet? Why 500 wallets. Just curious
Entropy is hard, little compute resources made that harder. I assume you're leaning on the entropy which is what I've always been concerned about and I think we've spent some time talking about.
I strongly suspect that it is not the entropy, we can get great entropy from small HW.
There is something going terribly wrong higher up in the stack. It is very obscure but if it happened, this is most likely what hit Coldcard
Thanks but highly doubtful. Seed generation is a pretty basic thing to fuck up, especially for a product like CC.
The publicized information only confirms this hypothesis so far
Nvk has promised a blog post coming soon
The speculation seems to be this is some kind of ai enabled attack
shiiit, compared to all the lame spam debates lately, this is the type of stuff that is actually scary
The user didnt use a passphrase, if he did, do you think it would have help prevent this?
Are we 100% sure that multisigs are safe ?
this is a setback for cold storage advocacy but overall good for bitcoin. this will drive more stringent requirements for sat security & privacy.
I wouldn’t trust an all CC mutlisig, but multi vendor multi sig is confirmed safe.
I am unfortunately one of those 500 users 😔
Fortunately not my whole stack but definitely not an insignificant amount.
This fucking sucks
afaik yes
What the ..
Sorry for your loss
Im sorry man
Oh fuck man
Im sorry
strange, that they can partially drain even knowing the seed.
Very odd…
Move the rest immediately. The bot might not have swept deep enough on the first run.
You should move the rest anyways, it is possible the bot just scanned the first 20 or so address and left, you are still vulnerable. Was this a coldcard mk3?
I’m the redditor that posted. I feel your pain.
Already got the rest of the wallet out and moved to an exchange. Needed to sell this over the next 3 months anyway
damn, sorry man
I'm sorry, Meyer.
Rest was moved as soon as I found out about the vulnerability and is safely on an exchange
Saw the notes circulating and immediately checked my wallet. realized a big chunk of utxos were moved last night…
Immediately moved the rest out and accelerated the transaction
And yes it was a regular standard coldcard mk3 with no dice rolls or passphrase.
My main vault is a multi sig with this same device as one of the 3 signers. Going to need to update that setup this weekend
ok, if your multisig is all with the mk3, they are not safe either. Sorry it happened to you, this really sucks. 😭
Sorry to hear!
The mk3 is only one of the signers. Other two are different vendors
Regardless going to update that setup this weekend
This really sucks and makes me question everything. Do I really want to keep having to worry about keeping my wealth secure in what should be secure setups?
How worried should I be if using a mk4 or Q? I know coinkite said only mk3 is affected but idk if that's something they can know with confidence.
I would move personally out of an abundance and of caution, but do it calmly in an emotionally collected manner
Feel for you. Hang in there. ❤️
sorry to hear man 🫂
So sorry to hear this… super big bummer… 🫂
Trading crypto doesn't have to be a guessing game.
Partner with Riley Greyson, a certified professional with a proven track record in market forecasting. Whether you're new or experienced, her simple strategy helps you trade smarter and capture real profits.
📲 Message her with "Join" right now to begin trading (
WhatsApp.com
Riley D Greyson
Business Account
)
@Riley GreysonThanks brother. Man this sucks, my only hwws are coldcards!
Do you think a manufacturer who reserves proprietary ownership over their source has any liability? Like, saying "trust us" requires some kind of responsibility?
I can't thank myself enough for getting started. Despite the economic situation, I'm so happy to see €78,000 in returns from a €15,000 short-term investment with pjtradinghub. His videos are top-notch and highly educational, giving you real insights to achieve your goals and come out from debt! For a guide to a professional trader, I highly recommend everyone check out his Telegram 👉 "pjtradinghub"
My daughter went through cancer treatment, and what Paul managed for me covered more than I expected.
I rarely talk about it, but that support genuinely changed things for my family
I’ve been exploring different perspectives in the crypto space, and I’ve come across Paul Jon's content a few times. What stands out to me is his focus on risk management and staying patient rather than chasing quick profits. I don’t think there’s a single ‘perfect’ approach to trading, but it’s useful to learn from different viewpoints and then build your own strategy over time. Some of his ideas seem practical, especially for people who are still trying to understand market behavior. At the end of the day, everyone has to test what works for them and stay consistent. The market is always changing, so having a balanced mindset and being open to learning is probably more important than following any one method blindly. Just sharing my thoughts based on what I’ve seen so far.”
Where to find him
Telegram 👇
"Pjtradinghub"
Same for me. Unreal man
☹️
Sorry to hear about that 🫂
Damn! sorry bro.
NVK will zap you back.
I can't thank myself enough for getting started. Despite the economic situation, I'm so happy to see €78,000 in returns from a €15,000 short-term investment with pjtradinghub. His videos are top-notch and highly educational, giving you real insights to achieve your goals and come out from debt! For a guide to a professional trader, I highly recommend everyone check out his Telegram 👉 "pjtradinghub"
