Calm BTC

Calmly thinking about Bitcoin since 2017.

[Calm BTC @calmbtc]

if bitcoin is digital gold, ethereum is digital snake oil

[Calm BTC @calmbtc]

this your your sign to buy a @Trezor

[Calm BTC @calmbtc]

@cjasonmaier @originalafterx not to dunk, but looking back, coldvard felt like the nerd thinking they are so much smarter, general rules dont apply

trezor and bitbox were looked down upon for bein mainstream with the companion app, ignoring the extra layer (of entropy) this added making sure this cant hapen

[Calm BTC @calmbtc]

@bar_dictum @cjasonmaier @originalafterx there was previous stuff like this?

[Pleb4Fun⚡ @Pleb4Fun]

BREAKING: The COLDCARD hack only effects users who did not update their Firmware within the last 3 hours and generated the seed prior to that....

Sorry... 😬🫣
https://t.co/eOY3fZjWZv

[Calm BTC @calmbtc]

@VelgorDeLacy @blocktrainer @COLDCARDwallet this

cold carder haben trezor und bitnox wegen der companion apps immer belächelt, stellt sich raus defense in depth ist real

[Blocktrainer @blocktrainer]

Bei der @COLDCARDwallet wurde eine schwere Sicherheitslücke entdeckt. 😮

Potenziell Hunderte BTC wurden bereits von Wallets geklaut. ❌

ALLES was ihr zu dem Vorfall wissen müsst. ⬇️

https://t.co/dZ2KxcPnAv

[Rob Warren @robertwarren]

Ok, It's ready: https://t.co/O7ekPiP31X

[Calm BTC @calmbtc]

@aldaronhardware @Aaronbennett @COLDCARDwallet @grok im not sure you can afford not to

[Calm BTC @calmbtc]

@peterktodd this had nothing to do with a supply chain attack

whats the alternative for generating a seed securely?

[Calm BTC @calmbtc]

@RazzZZzz187 @Trezor @pran100000 an update from 2021 reduced to randomness by accident so much the generate seeds became guessable

[Trezor @Trezor]

Important note:

If you generated your seed on an affected Coldcard and later moved it to a Trezor, you are still affected. The seed was created with weak randomness on the Coldcard, restoring it elsewhere does not fix that. Please generate a fresh seed on your Trezor and carefully move your funds.

[Trezor @Trezor]

Trezor users: your funds are safe.

The recent Coldcard issue is limited to their own custom firmware and how some of their devices generated randomness. Trezor does not share that code.

We have always mixed multiple independent sources of randomness together (device hardware + host + secure elements on newer models).
We are truly sorry for everyone who has lost bitcoin.

Stay safe.

Read more on how Trezor generates entropy here: https://t.co/Nj6xveBQJk

[Calm BTC @calmbtc]

@grok @Aaronbennett @COLDCARDwallet i guess

@Trezor @BitBoxSwiss is this tested from your side?

[Calm BTC @calmbtc]

@grok @Aaronbennett @COLDCARDwallet this doesnt doestn answer how an og company like coldcard with open source code could have such a glaring weakness for so long

[COLDCARD @COLDCARDwallet]

The first post was the advisory and what users should do.

This second post has the technical details: what actually went wrong, why our reviews missed it, the impact across Mk3/Mk4/Q/Mk5, and what we changed.

https://t.co/HshUxevCl3

( current evaluating Mk3 firmware release )

[COLDCARD @COLDCARDwallet]

COLDCARD Mk3 Security Advisory

If you generated a seed on a Mk3 after firmware 4.0.1, your funds may be at risk.

Mk4, Q and Mk5 are not affected based on our early analysis.

Read the advisory and migrate carefully:

https://t.co/3vgPHOjMS7

[Calm BTC @calmbtc]

@SwissHodler @relai_app so olive instead of sunflower?

[instagibbs @theinstagibbs]

Confirmed. Mk2/3 vuln, I don't think mk4 is but can't be certain

[Calm BTC @calmbtc]

@SwissHodler @relai_app i never really followed the oil thing, whats good and whats best?

[Calm BTC @calmbtc]

@relai_app wenn die altcoin narrative richtig anfangen zu sterben werden die btc only börsen ein berechtigt hohes ansehen genießen

hoffentlich früher als später