Parody memecoin and comedy project.
Obsolete technology. Crypto jargon. Unnecessary paperwork. One man’s lawn.
Entertainment only. No utility detected.
Gary has reviewed permissionless finance.
Additional forms will be required.
BoomerX is a not-yet-launched parody memecoin and comedy project.
Follow @BoomerXCrypto for further administrative delays.
Gary has been reading about the Coldcard situation, and he has Concerns. Capital C. He wants that clear.
For five years, the flagship "air-gapped, keeps your keys away from the internet, trust nothing" hardware wallet was generating some seeds using the chip's serial number. And the clock. Gary would like everyone to sit with that for a second. Not a secret. Not random. A serial number. A clock. The two least private numbers a device could possibly know about itself, sitting there, doing the job of a cryptographic key.
Coinkite ran an AI audit of this code. Found nothing. Clean pass. Meanwhile the person who allegedly found the flaw anyway also reportedly used AI, and that one, evidently, did its homework. Gary isn't sure what to do with that. He's mostly just noting, for the record, that one of these AIs was a lot better at its job than the other, and it wasn't the one on payroll.
Thirty-eight million. Seventy, if you trust the higher count. Under 45 minutes. From wallets that did everything right, by the way, the way you're supposed to. No phishing. No malware. Nobody clicked a bad link at 2am. Just five years of math nobody checked, quietly sitting there, until somebody finally did.
Gary's takeaway isn't "get off crypto." He's had this conversation with himself already and that's not it. It's smaller than that, and it bugs him more: if your entire security model comes down to trusting a box you can't see inside of, you're going to eventually find the one thing you forgot you were trusting. For Coldcard, this week, that was the entropy.
He's got the paper ledger back out. Again. It's ugly. Nobody's draining it with a firmware update, though.
#ColdcardWallet
🚨 ALERT: Galaxy's Alex Thorn says a likely 4th wave of attacks on COLDCARD wallets is underway with 218 transactions and ~389 $BTC swept.
He urges users to move funds off immediately.