Why did the attacker completely disregard privacy by consolidating stolen coins into a single address?
How did the attacker, who clearly planed this for a long time, fail to plan to cover their own tracks?
Why did the attacker use KYC'd service providers?
Why did Coldcard make these "wink-wink easter egg" posts about this exact bug around the same time the bug first appeared in the code base?
If it was merely a "retirement attack," why not exercise discretion so you could actually retire?
Why did the timing line up with major politically relevant developments like CLARITY and a Bitcoin Security Coalition?
How did the attacker, who clearly planed this for a long time, fail to plan to cover their own tracks?
Why did the attacker use KYC'd service providers?
Why did Coldcard make these "wink-wink easter egg" posts about this exact bug around the same time the bug first appeared in the code base?
If it was merely a "retirement attack," why not exercise discretion so you could actually retire?
Why did the timing line up with major politically relevant developments like CLARITY and a Bitcoin Security Coalition?
2❤️2
