@nobody
account deleted
No relay list published yet.
Recent Notes
Going dark.
1🫡1
Have your cold cards been plugged in to your computer?
When you say phrases like "abandon all of their addresses" it doesn't give confidence that you understand how things work. Addresses are infini...
Thx for the clarification on addresses. New seeds are now in place.
🤙1
Early this morning I woke up and noticed on my watch only wallet in BlueWallet and Sparrow desktop that someone has initiated an unauthorized transfer of all of my UTXO's to a BTC address that is not ...
Ask me how nervous I was moving my entire stack twice in three hours to counteract an unauthorized TX of all of my UTXO’s by a drainer exploit. Still don’t know where my security broke down but I suspect it was BlueWallet mobile. It was behaving strangely and opening without faceID etc. Deleted. Sparrow desktop only now.
Early this morning I woke up and noticed on my watch only wallet in BlueWallet and Sparrow desktop that someone has initiated an unauthorized transfer of all of my UTXO's to a BTC address that is not ...
OK so final rundown. Cold Card is the shit. No signing device and I’ve been air gapped since day 1, so despite the unauthorized TX showing “signed”, it would not progress to completion. Did a Replace With Fee to override the unauthorized TX and send sats to a temp address. Renewed my HW wallet seed to re-establish it is good. Looks like I am in the clear. Unless there is something fundamentally wrong with Cold Card’s security model, or with Sparrow desktop.
Cost: my seed plates and $50 in TX fees.
Fuck you hacker.
Cost: my seed plates and $50 in TX fees.
Fuck you hacker.
1
I totally feel you dude. I saw the amount and was praying you could make it in time. I have no idea how this guy signed this transaction.
Good thing I have a SIM pin on my phone too now.
🧡1
Don't worry about your coldcards. You can reset them and generate new seeds on them. Just make sure you don't need the old keys before you do that.
Cool thanks. But holy fuck what a wake call. Seeing an unauthorized TX for your entire stack is heart stopping shit. After hyping everyone I know on this asset, I’m going to look like a real schmoe if I get wrecked. I’d feel a lot better if I had some remote idea of how someone signed a transaction on my behalf when I have absolute physical control over all of the hardware and backups. And it is interesting that the unauthorized TX passed the 10 minute ETA for confirmation and still didn’t finalize.
I’m pissed that I have to throw away my steel backups. They weren’t cheap. Next copy is getting scrawled on the wall of my cave lol
I’m pissed that I have to throw away my steel backups. They weren’t cheap. Next copy is getting scrawled on the wall of my cave lol
🪃1🫂1
Is your seed compromised?
What was your process when migrating from ledger to cold card? Did you create a new seed?
I see you had difficulties with cloning a cold card, lots of potential places you...
Yeah the cloning thing was easy to remedy. Just firmware upgrade on both cold cards and it went off without a hitch.
Do you think all of the addresses on my Cold Cards are now unusable? It’s funny the gains on this cycle are being eaten by emergency TX fees and hardware purchases.
Thanks for your input. 🤙🏽
Do you think all of the addresses on my Cold Cards are now unusable? It’s funny the gains on this cycle are being eaten by emergency TX fees and hardware purchases.
Thanks for your input. 🤙🏽
Is your seed compromised?
What was your process when migrating from ledger to cold card? Did you create a new seed?
I see you had difficulties with cloning a cold card, lots of potential places you...
No shared seeds. And never entered seeds into any other app to set up watch-only. Is this a defensible asset or not? Because I’ve been immaculate in my digital and physical security other than talking to people on Nostr.
Did the replace by fee work? I See the transaction is confirmed now.
https://mempool.space/tx/ba928440f7a4b4a004199ca60001831cccd8ce0363ae0eef99dd50ab23d171fa
Very adept usage of the explorer cabron