Grace

[Galaxy Research @glxyresearch]

🚨LOSSES FROM COLDCARD HACK EXCEED $100M

High confidence 1,596 BTC has been stolen from ~7300 addresses across 3 confirmed waves + more 14 smaller incidents.

If we add suspected (but unconfirmed), the total balloons to $130m (2k BTC).

More in the thread below 👇

[James O'Beirne @jamesob]

I haven't told the full story yet, but I came to the same conclusion back in May 2025 when I started doing an audit of `coldcard/firmware`.

I wanted to figure out conclusively where the CC RNG was getting sourced from, and found that it backed up to some shady library called libngu (https://t.co/wQu3wOB7cb) that had literally 6 stars on github and was maintained solely by a pseudoanon tranny.

I knew from past experience that linking to libsecp256k1 from Python was pretty easy, which seemed to be the stated purpose of the library use, and so I was confused about why it was there.

I sent a report to the CC team that I had doubts about whether the true RNG was actually in use, and pointed out that the hardcoded yasmarang constants in libngu were sloppy. I advised they rip the whole thing out and link against libsecp256k1 directly.

I was told that if something was wrong "we'd already know about it by now" and that everything was properly configured for the real boards.

I didn't follow up rigorously, which was a horrible mistake on my part.

[Rob Hamilton @Rob1Ham]

IMPORTANT UPDATE

WE HAVE CONFIRMATION FUNDS ARE STILL BEING RECOVERED ON NO PASSPHRASE MK3 DEVICES.

THERE IS HOPE FOR RECOVERY IF YOU ACT FAST

MK4S WITH SHORT PASS PHRASES ARE BEING SWEPT

NO ONE IS SAFE ACT NOW

GET YOUR BITCOIN OFF COLD CARDS

[Alex Thorn @intangiblecoins]

THESE TXS ARE PENDING IN THE MEMPOOL WITH RBF OPT-IN AND APPEAR TO BE SIPHONS BY A COORDINATED "4TH WAVE" ATTACK ON COLDCARD USERS

IF YOUR ADDRESS IS IN THIS LIST YOU HAVE ONLY MINUTES TO ENGAGE IN A FEE RACE TO BEAT THE ATTACKER AND SECURE YOUR FUNDS https://t.co/nekSYMbSMj

[Charles Curran @charliebcurran]

LA is worth saving. Vote Spencer Pratt.

[Breaking Defense @BreakingDefense]

Pentagon workers vibe-code 100,000 AI ‘agents’ to use on unclassified networks https://t.co/YmfBXVxqr1

[SentinelOne @SentinelOne]

The history of cyberwar just got rewritten with a new
@LabsSentinel discovery by @vkamluk and @juanandres_gs. Stuxnet wasn't the beginning of nation-state sabotage through software. It was just the first one we caught.

Meet fast16 — compiled in 2005, five years before Stuxnet. It isn't espionage. It's not ransomware. It's a precision instrument designed to make scientists trust math that's been quietly broken. Silently. Precisely. Across an entire network.

The implications reach into advanced physics, cryptographic research, and nuclear programs.

Read the full @WIRED story below by @a_greenberg👇

[Grace @graceproducer]

Moon Base
https://t.co/njQ5dEmFxr

[The White House @WhiteHouse]

The goal is not just to reach the Moon, but to stay. 🌘

[NASA Administrator Jared Isaacman @NASAAdmin]

To build a sustained human presence on the Moon, we are building @NASAMoonBase, prioritizing surface operations and scalable infrastructure. 

- Frequent robotic landings and mobility testing including MoonFall drones 
- Starting in 2027 nearly monthly cadence of equipment and rovers with scientific payloads landing on the Moon. 
- Investments in power, communications, and surface mobility 
- Scalable infrastructure to support long-term human presence

The objective is clear: build the foundation for an enduring lunar base and take the next step toward Mars.

[NASA @NASA]

And everything under the Sun is in tune 🎶

This image from the eclipse during the Artemis II lunar flyby captures a halo of light around the Moon. Scientists are still investigating if the glow comes from interstellar dust or the solar corona.

[Grace @graceproducer]

@BeccaAmilee ❤️🙏

[IBM @IBM]

We’re excited to share our plans for IBM Quantum Starling, expected to be the world’s first large-scale, fault-tolerant quantum computer.

This new system, to be delivered to clients by 2029, is expected to perform 20,000x more operations than today’s quantum computers. Read more here: https://t.co/S0ZnuxMKf1

[Grace @graceproducer]

@BeccaAmilee Praying for you and your full recovery. I’m here for you, in spirit and with love 🙏

[Congressman Nick Begich @RepNickBegich]

It’s time for America to become the first BITCOIN superpower. 🇺🇸

I am working on something ₿ig with @SenLummis

Stay tuned for next Tuesday. @bitcoinpolicy

[Bitcoin Magazine @BitcoinMagazine]

BREAKING: 🇺🇸 President Trump signs executive order officially creating a #Bitcoin Strategic Reserve.

[Fish Bernoulli @BTC_Bernoulli]

So many people can't read. The US government;

Created a bitcoin-only strategic reserve
Tasked the treasury to buy more bitcoin
Put existing shitcoins in a stockpile & not buy more

[AMERICAN HODL 🇺🇸 @americanhodl8]

This is an explicit edict for treasury to create strategies to buy Bitcoin.

Right now it is LITERALLY ILLEGAL for treasury not to develop a strategy to buy bitcoin.

The U.S. government WILL be buying bitcoin.

[David Sacks @davidsacks47]

Just a few minutes ago, President Trump signed an Executive Order to establish a Strategic Bitcoin Reserve.

The Reserve will be capitalized with Bitcoin owned by the federal government that was forfeited as part of criminal or civil asset forfeiture proceedings. This means it will not cost taxpayers a dime.

It is estimated that the U.S. government owns about 200,000 bitcoin; however, there has never been a complete audit. The E.O. directs a full accounting of the federal government’s digital asset holdings.

The U.S. will not sell any bitcoin deposited into the Reserve. It will be kept as a store of value. The Reserve is like a digital Fort Knox for the cryptocurrency often called “digital gold.”

Premature sales of bitcoin have already cost U.S. taxpayers over $17 billion in lost value. Now the federal government will have a strategy to maximize the value of its holdings.

The Secretaries of Treasury and Commerce are authorized to develop budget-neutral strategies for acquiring additional bitcoin, provided that those strategies have no incremental costs on American taxpayers.

IN ADDITION, the Executive Order establishes a U.S. Digital Asset Stockpile, consisting of digital assets other than bitcoin forfeited in criminal or civil proceedings.

The government will not acquire additional assets for the Stockpile beyond those obtained through forfeiture proceedings.

The purpose of the Stockpile is responsible stewardship of the government’s digital assets under the Treasury Department.

PROMISES MADE, PROMISES KEPT

President Trump promised to create a Strategic Bitcoin Reserve and Digital Asset Stockpile. Those promises have been kept.

This Executive Order underscores President Trump’s commitment to making the U.S. the “crypto capital of the world.”

I want to thank the President for his leadership and vision in supporting this cutting-edge technology and for his rapid execution in supporting the digital asset industry. His administration is truly moving at “tech speed.”

I also want to thank the President’s Working Group on Digital Asset Markets — especially Treasury Secretary Scott Bessent and Commerce Secretary Howard Lutnick — for their help and support in getting this done. Finally Bo Hines played a critical role as Executive Director of our Working Group.