COLDCARD Bitcoin Storage Wallet Exploited [Attack Still Ongoing]

Flippin heck people getting SHAFTED

Good that I never heard about this "Coldcard wallet" before,not that I own any BTC though😅!
And even if I did,I wouldn't use such kind of "wallet"!
Of course,this is very bad for people using it,I feel sorry for them!

@xenu The total stolen Bitcoin is now 1128.6633BTC
https://coldcard-watch.vercel.app/

https://xcancel.com/KLoaec/status/2083580367970193449

I believe it's extremely important to stress that even users who IMPORTED or generated a seed with DICE are vulnerable, if they use the following features:

https://wizardsardine.com/blog/coldcard-rng-vulnerability/

@Nebuchadnezzar_II How is paper an airgap though bc if you are using Sparrow on Tails your private key is on the computer and the computer is connected to the internet.

I don't understand why everyone is shitting on hardware wallets don't they stop keys from ever touching a device connected to the internet? This is a shit implementation but I thought it was the best way to store large crypto long term. Or at least better than a hot wallet.

I don't have a cold wallet so im not personally offended or whatever just confused

STM-32 micro-processors on sale for $2.00

https://www.digikey.com/en/products/filter/microcontrollers/685?s=N4IgjCBcoLQExVAYygFwE4FcCmAaEA9lANogCsIAugL7X4KSkDOqAtgMwI1A

https://xcancel.com/BitcoinNewsCom/status/2084264904370847761

COLDCARD FIRMWARE HOTFIX UPDATE CAN BRICK DEVICES. A new bug has been identified in COLDCARD’s emergency firmware hotfix. While the update fixes the original entropy vulnerability, researchers say a temporary hardware RNG error can leave the device stuck on a fatal error screen before the PIN prompt, preventing users from accessing the upgrade menu.

Wow it gets worse. Their hotfix is bricking devices.

@xenu I believe the best thing is for all the wallet users who are not affected at the moment to move their BTC to a wallet with 128bits, and never trust the Coldcard team

@suzanne52 no question. This company needs to be avoided.

@xenu Few lessons to be learned here.

• People need to stop listening to the grifters who get paid to recommend these things and do some real research on the product, especially wehen it involves finances.

• Anyone who put their life savings into a single asset, no matter the asset, has only themselves to blame. The newest of new investor should know this as its rule number one in investing. And always has been.

• And anyone who put all all their life savings into one storage device, also has noone to blame but themselves. Technology can and will fail sooner or later.

Sucks that it happened, but could have been mitigated at the personal level if people just thought rationally.

That said, anyone in that community who has ever said or wrote have fun staying poor, well, karma is a mofo and those people I do not feel sorry for at all. And if that makes me a horrible person, so be it. Im sick of those maxi clowns.