I will post a blog article later today. But TLDR:
- it's worse than you think.
- Mk4, MK5, Q will get drained.
- multisig of Coldcard devices, or multisig where Coldcard signatures are sufficient to reach the threshold are at risk.
- MINISCRIPT WALLETS are ALSO at risk, if you use Coldcards where only CC signatures are enough to spend, or to recover.
No need to panic, but time to plan a move to new mnemonics/devices in the next few days, if you used a Coldcard in your setup.
My current hypothesis for the Coldcard theft.
1- The issue:
- Low entropy RNG, either in a library or secure element/chip itself. Could be a limited batch or a specific firmware.
- Probably affecting the mnemonic, even if the theft is weird/confusing.
- Thief knows about the RNG bug, but not about Bitcoin.
2- The attack
- Attacker asked an AI to craft a script to bruteforce and prepare a sweep.
- AI ONLY TRIED bip84 derivation paths
- AI ONLY TRIED A LIMITED NUMBER OF DEPTH
This is why we only see Segwit being stolen, and sometimes partial wallets instead of full wallets.
If i am correct:
- The funds of partially affected wallets ARE AT RISK or further drain
- The funds of other type of addresses ARE AT RISK when the scan looks for them too.
If I am wrong:
- WHY only bip 84?
- WHY partial sweeps?
Could be some very rare bug happening in very specific cases, but looking at the chain it's hard to guess what it could be. Some weird derivation bug happening only in CC, at bip 84 paths?
If you use a Coldcard MK3, or generated your mnemonic on one, without passphrase or dice rolls, MOVE YOUR FUNDS IMMEDIATELY.
Funds are AT IMMEDIATE RISK.
Use Multisig.
Alright, here's what's new!
Our beloved bitcoin mining friends @powremines released their new website, which we built for them.
In it, we explain their state of the art bitcoin mining and hashrate financial products.
Let's dive in 👇
Earlier this spring, we worked with @bitcoinKeeper_ to help with their rebrand project.
It was a blast, thinking through their history, team and beloved users...
So we shared some of our work and the results 👇👇👇
@bitcoinKeeper_@thibm_@isturitz_ 🤗 We had a blast working with your team. Can't wait to see what's next for Keeper and bitcoin self-custody going more mainstream!
Bitcoin Keeper has a new look!
We’ve rebranded to reflect what Keeper really is — your trusted guardian for long-term bitcoin security.
No barriers. No lock-in. Just simple, reliable self-custody.
Read the full post and check the new app features!
https://t.co/TbVgmz3L2h
Le patron de Michelin déballe tout au Sénat 🚨
Lors d'une audition exceptionnelle, Florent Menegaux lève le voile sur l'effondrement de l'industrie française.
Voici le compte-rendu complet qui révèle pourquoi la France est en train de tout perdre 🧵
After having worked with multiple bitcoin businesses over the last few months, @thibm_ and I realized it was time to join forces to help more companies building great bitcoin experiences. And make #bitcoin sexy 😎.
Very excited to start this new journey!
We’re launching a new bitcoin marketing and design agency!
From design, branding and marketing, we bring great bitcoin experiences to life.
And we already have proof of work:
✅ Worked with 10+ clients
✅ Active for 5+ years in bitcoin
Let's work together 👇