Damus
BitcoinChurch profile picture
BitcoinChurch
@BitcoinChurch
A friend sent me this and I wasn’t sure how to respond:

“I have a 2/3 multisig with a coldcard and 2 devices from 2 other vendors. The coldcard also had funds in single sig (same seed as used in the multisig). The single sig funds were stolen already. How vulnerable are the multisig funds until I migrate to a more secure wallet?”

I asked and he said he had spent from the multisig wallet a few times to test the setup, and also to correct an accidental address reuse.

I’m not sure what to tell him, anyone have any advice?

@Guy Swann @ODELL @MartyBent @Saifedean Ammous @Rob Hamilton
32
Guy Swann · 6w
Tell him to swap out the concord. His funds should be safe in the meantime but there’s zero reason to leave it there. If you lost a key you would never leave it so there was no third option. That’s what he has right now. Replace the CC with a third key. Even a software key is fine for a decent m...