A new world is struggling to be born.
Public Key
npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs Profile Code
nprofile1qqsp4lsvwn3aw7zwh2f6tcl6249xa6cpj2x3yuu6azaysvncdqywxmgpp4mhxue69uhkummn9ekx7mqpzpmhxue69uhkummnw3ezuamfdejsmataer
Show more details
Published at
2025-08-14T00:55:31+02:00 Event JSON
{
"id": "c87525bc3bbfbb6c72a93710f3ad56cfb8ed0ae417218fd445df5459617728cc" ,
"pubkey": "1afe0c74e3d7784eba93a5e3fa554a6eeb01928d12739ae8ba4832786808e36d" ,
"created_at": 1755125731 ,
"kind": 0 ,
"tags": [],
"content": "{\"lud06\":\"\",\"nip05\":\"[email protected] \",\"website\":\"https:\\/\\/castr.me\\/npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs\",\"name\":\"HODL\",\"lud16\":\"[email protected] \",\"display_name\":\"HODL\",\"about\":\"A new world is struggling to be born. \\n\",\"banner\":\"https:\\/\\/i0.wp.com\\/the-avocado.org\\/wp-content\\/uploads\\/2022\\/04\\/831491-2.jpg?fit=1280%2C720\u0026ssl=1\",\"picture\":\"https:\\/\\/i.postimg.cc\\/yd4j6Znb\\/0-AE2325-A-C9-A0-475-C-8-ED3-F012-E5-E3-C426.gif\"}" ,
"sig": "2f593f83b840bdc4d912aeb201b8475cf7b546031b97d48b3df174ddaf34e5c21c923a5113477fb79c7437302d0228d061c075510991ca7ff8fc5b2eab803dda"
}
Last Notes npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL This is the thing I also can’t stop thinking about. It quickly leads you to conclude either extreme malice or extreme incompetence. https://blossom.primal.net/1f028443048184ed432d8ba5ab44234a1e12e0eadb107a02238b3f61b7364b14.mov npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I know that this is a real satoshi quote but what in the fuck are we supposed to make of its inclusion on the block clock after all this shit went down? Like what the actual fuck. https://blossom.primal.net/71b7c15ee06a31f077e4744c76d0619554609ae1bfd39a2aa144236ac98088cc.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Yes use slipstream from Mara npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Guys it is theorized that the coldcard Q has 50 bits of entropy not 70 as some are claiming. The hack was discovered 6 days ago. In theory it takes 6.5 days. If you are still stuck in a state of freeze please MOVE COINS NOW. NOT LATER. https://blossom.primal.net/891c578c8154ae40d2e0a59e7fe8e977966cad3bf84c6da6091e66df4ad46a4c.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Just this https://gist.github.com/dsbaars/33ace96982773b5dc79d46551f64d467 npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I’m not sure if any rock @nprofile…ghn5 is turning over right now will bare fruit, but I am sure glad he is out there turning them over. All questions are fair questions after an event like this. Everything related to coinkite’s operations and leadership deserves scrutiny. Sunlight is the best disinfectant. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Too soon lol npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL They’re gonna go cross chain soon npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I have no intention of letting anyone off easy npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL If you are the hacker you should be terrified. Now and for the rest of your life. You have no idea the type of people you fucked with. Fair warning. Turn yourself in immediately and surrender all funds. https://blossom.primal.net/054c3bc69b624ed976b7330b1688002f95986efd6f2a0d16168d8db0fe580304.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL wtf is going on???! https://blossom.primal.net/8194459fbc39fe8ea09f3d27546c45a8986575171187ec082f975c6e6cd69834.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Right now we don’t have any hard evidence of malice just suspicions. Trying to be careful with language and not give in to the strong emotions and paranoia which I think are at least partially real and partially induced by lack of sleep. Have no idea what’s real and what’s not. Hard to tell. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Nobody is sleeping. On survivor's guilt, freeze states and getting your head back after the Coldcard entropy bug. I've been talking to everyone in bitcoin the past 6 days and i keep having the same conversation. Flat, wired, running on three hours of sleep. Our people are rekt, even those of us who weren't explicitly rekt by the exploit. This wasn't just a bug, it was a belief-system failure. (claude came up with this line, but fuck is it true) Psychologists call what just happened "shattered assumptions" the world is basically predictable, effort gets rewarded and if i do the right things i'll be ok. Our version was something like self custody done while following guides from educators in the space is safe. Cold storage. Air-gapped bitcoin is safe and if that's my setup then i can rest easily at night even as the fiat world burns around me. This entropy bug completely inverted that assumption and turned a lot of our world's upside down over night. The people hit the hardest weren't degen leverage traders. They were the careful ones. The prudent ones. The ones who did everything right. The ones who did the homework. Bought the "right" devices. Followed the guides. In the past few days i have been in contact with many of those affected. Their stories are heart breaking. These are the best kind of people. Honest, decent, moral, hard working family people. Saving for retirement, or for their children. After talking to them all day Saturday in DM's and on audio spaces i sat alone in my office and cried. I haven't really cried like that since my father died. When good people's prudence and conscientiousness gets punished your brain's entire model of "how to be safe" throws an error. That error is what we are feeling right now. The Five Rooms (This next section written by Claude) "Survivor's guilt" is the phrase going around, and it's real — but it's one room in a house with five. Figure out which room you're in, because they need different things. 1. You lost funds. You're grieving. Yes, grieving — grief isn't reserved for death, it's the response to any major loss, and years of savings qualifies. Layered on top: shame and self-blame. I should have used multisig. I should have known. More on that below, because most of that self-blame doesn't survive contact with logic. 2. You dodged it. Wrong device, right quorum, moved coins in time, pure luck. This is survivor's guilt proper: the ugly whiplash between thank God and why them and not me. Relief that feels obscene. It isn't. Relief and compassion run on separate circuits — feeling one doesn't cancel the other. 3. You recommended the thing. The guilt of having pointed people toward the blast radius. What I'll add here: guilt and shame are different animals. Guilt says I did something wrong, and it's useful exactly once — as fuel for repair. Shame says I am something wrong, and it's useful pretty much never. It makes you hide, and hiding is how all of this gets worse. 4. You haven't checked yet. You know the wallet is there. You haven't opened it. Every day you don't, it gets heavier. That's not laziness or cowardice — that's freeze. Keep reading. 5. You're just watching. Nothing at stake, can't look away, feel insane for being this rekt by it. You're not insane. Researchers studying the Boston Marathon bombing found that people who consumed hours of coverage a day showed more acute stress symptoms than some people who were physically there. The feed is a re-exposure machine, and you've been running laps through other people's worst day for a week straight. Fight, Flight and Freeze Fight could look like: Double and triple checking everything, Glued to the screen for minute by minute updates. Hunting for more bugs like the bitcoin red team guys. Literally fighting on X or Nostr. I personally am in fight mode right now. Though i don't know who or what to fight so it's essentially a lot of wasted energy if i'm being honest. Flight could look like: "i'm selling everything". "i'm done with self custody". "i'm done with all of this". "fuck this shit who needs this in their life". it's an urge to just get away from everything related to bitcoin once and for all. I have many friends in flight currently. Some even panic selling their bitcoin. While i don't believe that is the optimal strategy it's hard to blame them and i would never pass judgement on people stuck in flight. Freeze could look like: Not checking the wallet. Not making plans to have someone else get to it if on vacation. Lying awake neither restful or in a state of action. If you are stuck in a state of freeze and you know there's something you need to check or do... please go check. Will yourself into action. Tell a trusted person and enlist them to help. These are psychological states, not character flaws. How to unstick yourself (written by Claude) The unstuck protocol 1. Sleep before decisions. Non-negotiable. A week of broken sleep measurably degrades judgment and emotional control. And this week, degraded judgment is the attack surface: the phishing wave is already here — fake security updates, fake migration tools, urgency everywhere. Panic is what they're farming. If a message makes your chest tight and demands action now, that's the tell. No irreversible moves — no migrations, no seed ceremonies, no market decisions — on no sleep. The coins can wait twelve more hours. Mistakes can't be unmade. 2. If you're frozen, borrow a nervous system. Can't face checking your exposure? Do it with someone on the phone. Pick a time, pick a person, do it together, then stop. Bounded, witnessed action breaks freeze better than willpower ever will. 3. Ration the feed. You already know everything you need to know today. Check twice a day at set times. Doomscrolling isn't vigilance — it's re-exposure wearing vigilance's costume. 4. Audit the self-blame. Poker players call it resulting: judging a decision by its outcome instead of by what you knew when you made it. "I should have known" — should you? Did anyone? You made a reasonable call with the information available, the same call thousands of careful people made. Bad outcome, defensible decision. You don't get graded on information you didn't have. 5. Convert guilt into repair, then put it down. Help one person migrate safely. Boost accurate information. Warn people about the scams. Then stop. Guilt that doesn't convert into action just becomes acid. 6. Say the real thing to one human. Here's Bitcoin's cruelest catch-22: the opsec that protects your coins isolates your grief. You can't tell your coworkers. Maybe you haven't told your spouse. The normies would just laugh — magic internet money, told you so. Psychologists call this disenfranchised grief — loss you're not allowed to mourn in public — and it's exactly why this community has to be its own support network. Nobody else can be. Find one person you can tell the truth to, even if the truth is just "I'm not okay." Unwitnessed grief doesn't process. It just sits there. When it's more than a rough week All of the bitcoiners i know affected by this are very stoic, extreme personal responsibility types. These are the type of men and women who take on the weight of the world and i am proud to know them, but... If two weeks from july 29th you still can't sleep, can't feel anything, or the thoughts are getting dark that's past the do-it-yourself line. There is no shame in getting help. There is no shame in putting down the weight of the world and asking others to carry it with you. Financial trauma therapists exist. This is literally their job. And if tonight, or tomorrow gets genuinely dark and you don't see a way out please call someone now and not later. The protcol survived. Make sure you do too. If you need a helping hand call or text the crisis line at 988 in the U.S. and talk to someone who can help or look up the number in your country. Check on your bitcoin friends The loudest people this week are not the ones i am worried about, it's the people who have gone silent. Send the DM "You Good bro?" It costs nothing. We have a moral duty and obligation to reach out to everyone we can. We are going to survive I'm known for being an optimistic character around the bitcoin community and that hasn't changed, but the weight of this tragedy has hit me hard. The story of bitcoin in my mind is the story of the little guy, the person who the system is rigged against finally being able to protect themselves against that system. When a billionaire loses 10 billion or makes 20 does it really matter? But when a family was able to save 100k and it is ripped away from them through no fault of their own? It is simply too much. Bitcoin will survive, self custody will survive. Let's make sure me, you all our fellow bitcoiners do too. Get some sleep. https://image.nostr.build/c44aad59079c6ed060ed2e3262ecc066134f9862f4359ff6c6edf3c3e60616a5.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL That could be If anyone was paid without disclosing npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL That’s all it was though an instinct. As far as I know I was the only one to say it this clearly this early. Not patting myself on the back just saying that it likely didn’t even occur to many. And you also have to throw in the fact that everyone was making sure their own setups are secure and if you have a multisig that means travel idk man you’re right it would have been better to be sooner but it’s hard to Monday morning quarterback it. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Kinda. There are ways to mix coins and do cross chain swaps for laundering purposes npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Most of us were like platform video games and internet porn at best lol 😂 we were technical enough npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL If they’re in America they will be caught if they’re in North Korea nothing will be done npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I tried my best to urge everyone to put out content asap on X. Many listened thankfully. https://blossom.primal.net/fd424fd5e002f69b0fe361caf514302d68f12280e4af7ffe03225c6c2f66f2b7.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL First time I’ve laughed in days https://blossom.primal.net/50016bf94377cee25cd65d15aca209bd25ebc180fa16a40b073f236894d5877d.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL It’s like when a woman turns up murdered the cops always look at the husband because it’s usually the husband npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Still vulnerable but no credible reports of one being hacked yet. Key word yet. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Freudian lol npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Things that make you go hmmmmmm @npub1vjk…d33q https://blossom.primal.net/7d0ecae8486885762cd6ce2da625ffbd6d05afe0cd75979446b00e4cfecdc267.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Wow npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL You’re welcome. Thank you for telling me. That means a lot that I actually had an effect on someone. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL https://youtu.be/wAUq85GSRu0? npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Idk who’s all involved at this point npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL It’s rob hamilton Ben Carman Calle James and a couple other guys doing ai audits using kimi k3 npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I wish they had broadcasted sooner, but I think in a very human way they were completely blindsided and honestly probably stuck in a state of disbelief/denial. In the kubler Ross stages of grief Matt seemed like he had progressed to anger while Marty seemed possibly stuck in denial. I thought they held themselves to account well. They didn’t make a single excuse and they are certainly more apologetic and contrite than nvk or anyone at coinkite. At the end of the day they are podcasters, not tech wizards or experts. I know both of them through the years and I know they are good men who feel absolutely horrible about their hand in all this. I think we’re all human and it’s very very difficult to be perfect in a situation like this. I myself heard about it very early in the morning and denied it was happening at first. It couldn’t be true I thought. It had to be something else. It could not possibly be that the entropy generation was bad. Could it? We now know it was. I trusted my gut and called @npub1emd…c9aw after about 30-45 mins of thinking about it at the gym and realizing something wasn’t right. Rob dug into it immediately and told me a few hours later there was indeed a serious issue. That’s when I began raising the alarm here on nostr. Should I have acted sooner? Yes. Probably by almost an hour. But I am human and I was stuck in denial at first. I extend the same grace to Matt and Marty. This is one of the worst moments of their careers and so many things they believed came tumbling down at once. It would be hard to do exactly the right things in that scenario. That said the audience members who lost coins are the actual victims of course not Matt and Marty. So it’s just… idk man it’s an incredibly sad situation I think because most people were good people trying to do the right things. It’s seriously a tragedy of epic proportions. Hard to find the right words to say about any of it. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL The bitcoin red team guys have said sparrow has passed their audit/review as of today npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Very useful site to track the ongoing coldcard exploit in real time which was coded up by James obeirne and some of the other bitcoin red teamers https://cktripwire.com npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Very thorough #nevent1q…0qt2 npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL 💯 npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL From coinkite just now. Posted without comment. https://x.com/coldcardwallet/status/2084731768632991801?s=46 npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I hear you and fwiw I don’t encourage it and always zap everyone a lot npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL It seems highly unusual, bizarre even to work at a company for three years and never meet the other co founder. Especially in such a small company. https://blossom.primal.net/d0cc06a5580e6ef12c867a13f99531e348395e84b8b9623836dcbcd16e1a11ef.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL In order to reach the normie we must think like the normie lol npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL @nprofile…p90e can you tag me or link me to everything you know about Peter D Gray. Not even totally sure I believe that’s his real name at this point. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I’ve been posting about it. Still not sure what to make of it but not looking good npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I deserve no credit for anything. This is the bare minimum from anyone in bitcoin. These attacks are getting worse and are only picking up steam. Reports indicate there are now as many as 15-20 motivated sophisticated attackers. PLEASE if you know anyone who may be a coldcard user reach out to them and alert them to move their funds ASAP. Here’s a helpful pic you can send to people or post on normie social media channels. https://blossom.primal.net/d7726026629092a10ad927c7c0bdd267a5988a3084a54a0ea49e2d5348064477.jpg #nevent1q…vn28 npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL It’s all just zap washing. People zap me and I zap them right back out. It’s kind of a larp we’re all doing tbh. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL The prompts would be super useful npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL @npub1mpn…4nxm npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL https://primal.net/e/nevent1qqsqzc6e03cltnrwuwn4nngfj0j7xsvvk99pny6nhu0jd49d8mxeadqcdjskz npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL From James Obeirne on x “I haven't told the full story yet, but I came to the same conclusion back in May 2025 when I started doing an audit of `coldcard/firmware`. I wanted to figure out conclusively where the CC RNG was getting sourced from, and found that it backed up to some shady library called libngu (github.com/switck/libngu) that had literally 6 stars on github and was maintained solely by a pseudoanon tranny. I knew from past experience that linking to libsecp256k1 from Python was pretty easy, which seemed to be the stated purpose of the library use, and so I was confused about why it was there. I sent a report to the CC team that I had doubts about whether the true RNG was actually in use, and pointed out that the hardcoded yasmarang constants in libngu were sloppy. I advised they rip the whole thing out and link against libsecp256k1 directly. I was told that if something was wrong "we'd already know about it by now" and that everything was properly configured for the real boards. I didn't follow up rigorously, which was a horrible mistake on my part.” npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Yes, but partial and no loss of funds. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL The rumor going around is that this switck character was actually doc hex #nevent1q…hgm8 npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL https://blossom.primal.net/5724350d32a5ee3696a4c005a0b0b17b13cbcad219e98235c782aaa5339d7224.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL lol npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I don’t understand dev culture well. My understanding though is that this is all ad hoc thrown together on the fly and that anybody who wants to join in the effort is more than welcome. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Bitcoin red team is the most important thing to come out of this whole tragedy. Thank you @nprofile…lslf @nprofile…wzf5 @nprofile…l3uj and everyone else working tirelessly on this project. We must keep this effort going and make it a permanent and well funded part of the bitcoin ecosystem. https://blossom.primal.net/aef50a6a16975247a30e627544b82fe61bd73c5752b6bb9089f01986f97fc34d.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Not at this point npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL The response from coinkite has been absolute dogshit. https://blossom.primal.net/8144d8f9865377ef1727b202e9a8cde94e6b7c993137a9e8ec4cf2f0a8a97e19.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL https://blossom.primal.net/86e6f9330b7eab64bcff45563a55b7bb34b2af35817b08a10e13f84a7960fef7.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL It did but people have been very cautious about the legal liability npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL https://blossom.primal.net/952e9fa44a33015d2804fe4394dde870fd9ee8b34ab14200f7a991213a1d51b3.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL https://blossom.primal.net/c018aa258b120cbab9f4401eaaf9a97f3b17c34fe0d14d6414e26178cdec2cad.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Can you find that video? npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Looking back over my own statements about coldcard over the years and here I am in one telling a fellow Bitcoiner that coldcard is good for single sig. the very thing being exploited. While I did push multi vendor multisig often the fact that I occasionally touted coldcard as “the best” despite having no ability to audit this claim is unacceptable to me. I fell for the social proof of technical and respected friends using it and recommending it. I assumed someone was looking. Apparently no one was. I am sorry. https://blossom.primal.net/e83df1e37741c89aad6de1fece7284a16a11f4fa793f591eb7e3601a298d5548.png npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL For now avoid using entirely npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL They will be npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL No. The only risk is if you have too many coldcards in your quorum. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Haven’t slept in two days. Will probably take a sleeping pill tonight. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL It’s like a bad dream npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL URGENT: I’ve seen some people saying that they are on vacation and won’t be able to check their coldcard for days until they get back. If you have one of the affected coldcards and can’t get back in time please call a trusted person, have them go to where your device is stored and walk them through the procedure to transfer funds over FaceTime. Normally this would be horrible advice but under these circumstances I think it has the potential to save someone’s coins. Attacks are increasing not decreasing and attackers are starting to crack through the affected mk3’s with pass phrases. There are even credible reports of mk4’s with pass phrases being hit. If you are in this specific situation, throw the regular rules out the window and do what you must in order to save your coins. DONT WAIT. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL What makes you think so? npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL https://blossom.primal.net/4ed84ba478468ffb2500577946bf795994288b599a4c037051eb0cda45929088.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL As one of the larger active accounts on nostr please tag me with anything breaking or urgent and I will do my best to see it in time and repost it. It’s important we get information out to people as fast as we can right now. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL That would be doc hex cto at coinkite npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL You know the famous cloud flare lava lamp wall? Apparently most of the entropy is coming from the digital noise in the camera. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Absolutely. It’s never wrong to say the truth. That’s a radical principle for most but it’s a principle we live by. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL https://blossom.primal.net/986564013e2c730dce73dcd0780dc3e2d5b87fd72a4acbb067c46c05d6832353.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I was talking to the team at casa same thing over there. This has really validated multi vendor multi Sig. lots of people took a bullet over this but no one died. That’s a huge stress test across the entire collaborative custody space and it passed with flying colors. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I spent all day offering emotional support and guidance to people affected. These are seriously good decent honest hardworking people. The best people. It makes me fucking sick to my stomach what is happening to them. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL They shipped three generations of products with the same catastrophic entropy bug. This is not something that can be overcome or overlooked. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL He’s the coinkite CTO. It’s well known in technical circles. NVK has always been the marketing/hype man. Doc hex aka Peter gray is the tech “wizard” at coinkite npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL https://blossom.primal.net/714bacad9a572d2232637d8a6fea29b158970895c3617abfa9a47d82b2b53ae7.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Yikes npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL https://blossom.primal.net/3a0149111f84d9b3fbfc94c0f171df60ca0ad7c06b3725cc7bb545bbc8f69c34.jpg #nevent1q…g54y npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Worth a read https://insider.btcpp.dev/p/when-randombytes-runs-but-doesnt?r=2jfs7&utm_campaign=post&utm_medium=web&triedRedirect=true npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL A new wave of hacks and attacks is ongoing. Please act urgently if you have an affected device. These attacks will only increase. https://blossom.primal.net/123d4d2172f43ce94de3d0c20f31b0ca6c91454892a68977f0605f5be6ac4a28.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I suspected a lot of these mk4 hacks were actually migrated mk3 seeds npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL What do you recommend to non technical normies? npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I do consider nvk a friend and I did generally recommend the coldcard when asked though I always put it amongst Trezor and ledger. I would tell people “get a trezor a ledger or a coldcard” was kind of my stock line for non technical people. The reason I put coldcard last and would often steer people towards a ledger or a trezor is because coldcard is intimidating for the average person. I had assumed it was secure though to the degree I assume all HW’s are. In hindsight we now know that was not true. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL https://blossom.primal.net/f8caa0466445049afda3dd5a1fb1dc6ebd6633d97a52359dfeadc0fea46588f3.png npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL This is our friend’s bitcoin. Good people. Hard working family people. Saving for their retirement. For their kids. Money that was left for loved ones by Bitcoiners who passed away from brain cancer. Bitcoin that belongs to expectant mothers. Bitcoin from 10 years of scrimping and saving. We must look at it, we must feel this pain and we must never ever ever allow this to happen again. #nevent1q…ewju npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Trezor one is great. I’m just saying it was the OG and the coldcard is obviously not an improvement npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I’m so sorry for what you are going through brother npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL The idea that we were plugging this stupid fucking piece of shit into a 9 volt battery to mitigate extremely esoteric and sophisticated NSA level electromagnetic attacks meanwhile it had worse entropy than a fucking trezor one is just… bro wtf are we kidding with this shit? npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I’m ok, but I’m sad for my friends. I feel horrible npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL I am so sorry brother npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL This is absolutely tragic. I am sick to my stomach reading these stories from Danny and others. #nevent1q…fxvx npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Thinking back to how the coldcard was marketed I can only think of proverbs 16:18… “Pride comes before the fall” npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Hahaha npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Unlikely. Exchanges aren’t using cold cards for their keys npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL 🚨 From a deeply technical friend who absolutely knows what is going on. Take this deadly seriously. https://blossom.primal.net/b31072fb62b543554b45051d91dd8502b3aac108681633221cee6edf4c065230.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Insane https://blossom.primal.net/bf7ad921e7ede31181cd817b25a0877baa02261de68beb8c94c278a9ec5fee63.jpg npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL Coldcard is done after this. They’ll be sued out of existence. npub1rtlqca8r6auyaw5n5h3l5422dm4sry5dzfee4696fqe8s6qgudks7djtfs HODL So many of our friends affected by this it fucking sucks. #nevent1q…qj46