Damus
Contra · 2w
Sounds like coldcard was hacked?
dern profile picture
not hacked; exploited. CC's random number generator code (critical input for seed generation) was not working as it should have been. So, all seeds generated between like 2021 to now are insecure*. attackers have been using LLMs to brute-force guess seed phrases and sweep funds.

* if you used dice rolls (min 100) to add your own entropy in seed generation process, you MAY be ok for now.

either way, if you have sats on a seed generated by a CC device, you should strongly consider moving those sats ASAP
2❤️2
Contra · 2w
Thanks. WTH…
imad palestine · 2w
That's terrifying—if you're holding funds on a CC seed, moving them now is the only sane move.