*AI translation of the previous post
If any of you chose to use a Coldcard based on my past recommendation, I cannot undo what has happened today—other than to offer my deepest and most sincere apologies.
It is true that I have always stated I do not recommend Coldcard for general users due to its high cost, fragility, and steep learning curve. However, I fell into the trap of believing it was the highest-security device available, without conducting a deep technical analysis to verify that belief myself.
What has happened is far worse than anything we have experienced before. I sincerely apologize to all affected victims from the bottom of my heart.
Urgent Warning & Immediate Actions
For anyone using a Coldcard (Mk3, Mk4, Mk5, and Q models):
Highest Risk: Users on Mk3 who generated their Seed Phrase directly on the device using Firmware v4.0.1 and above (including the v4.1.x release cycle originating from code changes in March 2021).
Other Models (Mk4, Mk5, Q): While their Secure Element mitigates part of the risk, seeds generated prior to the emergency hotfix firmware are still vulnerable.
What you should do immediately:
Notify everyone you know who uses these devices.
If you already have another safe Hardware Wallet: Stay calm and carefully transfer your funds to a new, secure wallet right away.
If you cannot secure a safe alternative Hardware Wallet in time: As painful as it is for me to say this, the safest immediate option is to temporarily transfer your funds to a licensed, SEC-regulated exchange to eliminate the risk of automated key derivation exploits.
(Note: Based on current technical facts, other major Hardware Wallets—including Foundation Passport—remain completely safe, as they do not share the affected codebase.)
The events of the past few days represent one of the worst moments for Bitcoin holders. It serves as a stark wake-up call to reflect on where we lost sight of our core ethos: "Don't Trust, Verify."
Despite this tragedy, my belief in Self-Custody and holding your own keys remains unshaken. My heart goes out to every single person impacted by this incident.
Before #AgeofBitcoin launches.
Join fun to win real Bitcoin!🪙
#Bitcoin Giveaway!
Complete simple tasks like
Following the project on X and Kickstarter.
Many ways to earn entries
for a chance to win Bitcoin!
👉Join now: https://t.co/OvpalI1NzN
⏳End: July 21, 9:00 PM (GMT+7)