๐Ÿšจ THE #COLDCARD ATTACK HAS ESCALATED ๐Ÿšจ MOVING YOUR FUNDS ACTUALLY MAKES YOU A HIGHER PRIORITY FOR GETTING SWEPT. ๐Ÿซช The attackers are clearly running a script that will IMMEDIATELY sweep you if you try to move your funds. ๐Ÿซ  It appears that they have been compiling a database of affected addresses for YEARS, so if an affected address transaction hits the public mempool, the attacker is doing an INSTANT RBF (Replace By Fee) to beat out the person trying to save their funds. ๐Ÿ˜ญ The ONLY way to avoid this is to hand your transaction DIRECTLY to a miner THAT DOES NOT BROADCAST TRANSACTIONS so that it will not hit the public mempool. ๐Ÿ’โ€โ™‚๏ธ This is SO fucked; spread for awareness. ๐Ÿค™
exist270's avatar exist270
#ColdCard funds are getting swept WHILE THE #BITCOIN / #BTC TRANSACTIONS ARE STILL IN THE MEMPOOL. ๐Ÿซช The attacker is clearly watching broadcasts, so unless users are signing transactions straight from a miner, this shit is gonna keep getting worse until ALL at-risk funds have been drained. ๐Ÿซ  Absolute fucking shambles. ๐Ÿค™ https://x.com/i/status/2085325832285757680 View quoted note โ†’
View quoted note →

Replies (3)

I approve of non-broadcasting methods for recovery, but we still have to wonder what kinda surveillance & #KYC mechanisms exist in the narrow recovery window/method for people to retain their #Bitcoin / #BTC stash. ๐Ÿซช I'm sure 3 letters will LOVE that data trove. ๐Ÿซ  It's bad ALL THE WAY DOWN. ๐Ÿค™
The attack began as 6-7 figure sweeps, then moved down to 5-6 figure sweeps; my assumption is they are prioritizing big bags first for max extraction. ๐Ÿคทโ€โ™‚๏ธ If you order the attack solely by whale โ†’ shrimp UTXOs, then all the small fries have time to scurry while you're spending compute time taking down the whales; unless you have a radar out to stop them from escaping. ๐Ÿ’โ€โ™‚๏ธ It seems there is a mechanism to impede ongoing flights to safety. ๐Ÿคฆโ€โ™‚๏ธ Snipe scurrying shrimp โ†’ back to the dormant whales. ๐Ÿซ  That seems to be the execution logic. ๐Ÿค™
โ†‘