This is not a game. #Bitcoin is not crypto. This is not a trade or tech stock. This is repricing everything. This is global, non-sovereign, hard capped, decentralized, accessible, permission-less money empowering individual rights and freedom.
A friendly reminder that the best "red team" scenario is one where projects/companies are constantly testing their own projects and those they rely on upstream.
You can do a much better job testing and validating vulnerabilities in code and projects you have a deep understanding of, and if every project/company does this we get a massively increased level of security hardening without relying on fragile, temporary red team coalitions.
For this to be sustainable it has to be something we each are tackling, all the time, forever. Welcome to the new world, anon 🫡
WATCH: 11 minutes of influencers recommending Coldcards after March 2021, the month that they changed their software license and introduced the RNG bug. Tag your favorite Bitcoiner when you see them!
Coldcard reminded you of your entire self-custody setup, clunky and slow. An attacker armed with all of the steps to break into your house and steal your Bitcoin would still face some time-consuming, inelegant steps. CC fit right in because it’s UX embodied what we thought security should look like. Too many of us had CDS
I mean. People got their life savings *swept out of hardware wallets, inside their homes, without ever connecting said wallets to the internet*
This is a mind-bending attack/bug that shakes self-custody to the core
People who took extra care, didn’t scam, didn’t gamble, didn’t use leverage, didn’t leave coins in a custodian, etc etc, got destroyed
Exchange hacks are “whatever” compared to this, in my view
Now. Bitcoin is up 60x since Gox hack. Bitcoin will be just fine. And these people will learn their lessons. But it’s the worst thing I have seen so far
Conspiracy theories about the CC attacker sitting on this info for years can be interesting but the timing and power of open source AI models like Kimi K3 make it much more likely they just figured out the exploit within the past few weeks
One of many stories: on Christmas Eve 2023, NVK tweeted that there was an entropy bug in our @FoundationHQ Passport for seed generation.
No responsible disclosure – just a tweet to his entire audience on Christmas Eve. He was wrong, thankfully.
So many people stepping up these past couple days. Absolute gigachad VIPs like @Rob1Ham, @PortlandHODL and @w_s_bitcoin.
That is by no means everyone, but I wanted to give these guys props for helping so many people through this insane incident.
A few people have stepped up in a big way over the last few days.
Shout out to @Rob1Ham@w_s_bitcoin@PortlandHODL and all the others that have been working around the clock to help people caught up in this utter shitshow