Damus
Laser profile picture
Laser
@Laser
Why I believe #Coinkite defrauded #Coldcard customers. 🤫

1. CTO authored entropy vulnerability while pretending to be an external contributor. Coinkite props up CTO alias as an external dev in comms.

2. CEO shared details with Odell that could only apply to the entropy vulnerability that had just gone out to customers. Odell then bragged about his self custody guide, implicating CEO.

3. CTO always used the ifndef guard correctly in the Coldcard firmware, literally dozens of times, but shipped a singular misuse of the function under his alias, thus allowing customer funds to be swept remotely.

4. In the same release the entropy vulnerability was distributed, the CTO had enabled the interactive debugger used to verify code changes on live Coldcard devices, which would plainly reveal that the false/pseudo Yasmarang entropy had been selected.

71❤️4🤙1
Account deleted · 1w
If Coinkite really pulled that off, every Bitcoin user needs to treat their hardware wallet like it's already compromised. 🕊️ Our personal diary and story from Gaza are pinned on my profile if you'd like to see. https://i.postimg.cc/1zv9VTqN/altqaaat.png
sats>bits · 1w
Apparently that call with NVK and Odell where NVK brings up a “bug” to Odell was about a completely different “not critical” bug than the RNG one. And that bug was patched shortly after that call. Did you see any of this during your investigation or did I read just misinformation online?
Energy Producer · 1w
And where is any explanation from them? Are they on the run?