Damus
GlenCanete · 1w
Hello po.. good evening. Pako clarify lang po yung cold and hot wallet in order for us to better understand.. thanks po
InvalidCastX profile picture
Hot wallet is yung always online — like your phone app, exchange account, or browser wallet (ex. Cashonize, Paytaca, Metamask, Trustwallet). Super convenient kasi anytime pwede kang mag-send or receive. Pero higher risk kasi connected siya sa internet, so mas madaling target ng hackers.

Cold wallet naman is yung offline. Hardware device (like Coldcard) or even paper. Mostly for long-term storage ng malaking amount. Normally mas mahirap ma-hack kasi hindi connected sa internet.

May bug pala yung ibang older Coldcard devices noong ginagawa nila yung recovery seed phrase. Instead of making a super strong random seed 2¹²⁸ or 2²⁵⁶ (normally almost impossible to guess), may firmware issue na naging mas weak yung randomness — around 2⁴⁰ possibilities lang.

2^40 is still a big number (around 1 trillion), pero with modern computers kaya na i-brute force guess. Once nakuha nila yung seed phrase, pwede na nila i-empty yung wallet — kahit offline yung device mismo.

Kaya yung mga old, long-dormant Bitcoin wallets biglang na-drain. Years na silang nakaupo, pero dahil weak yung seed from the start, vulnerable pala sila.