#ColdcardEntropyExploit

🚨 One security failure. Over $40 million in Bitcoin gone. More than $40 million worth of Bitcoin has reportedly been stolen following the Coldcard hardware wallet hack, raising fresh concerns about crypto security. The incident is a reminder that self-custody isn't just about owning a hardware wallet—it's about securing every part of the process, from where you buy the device to how you protect your recovery phrase. Whether you're holding 0.01 BTC or 100 BTC, security should never be an afterthought. As more details emerge, this could become one of the most closely watched hardware wallet incidents in recent years. 👀 Do you think this changes how people will store their Bitcoin going forward? #DailyOrbit

> 🚨 The Cold Hardware Wallet Exploit Incident — What Happened Briefly? 🚨 More than 1,000 $BTC, worth around $63 million, were stolen from hundreds of Coldcard Mk3 hardware wallets within approximately 25 minutes. The number of victims is estimated to be over 500 wallets, and the attacker did not physically hack any device. 😐 The reason? A software vulnerability from 2021 caused the recovery phrase (Seed Phrase) to depend on the device’s startup timing and the speed at which users pressed the buttons, instead of using true randomness. This made guessing recovery phrases significantly easier — a flaw that went unnoticed. The attacker discovered the vulnerability early, precomputed the private keys, then waited until the wallets were funded with Bitcoin. After that, they moved everything out. 🔻 Ledger / Trezor wallets and other devices are not affected by this issue and are currently considered safe. 📊 Follow me for more trading opportunities and daily market analysis.$BTC $ETH

The Coldcard situation is a good practice test for migrating BTC into low entropy seed into a new one! You’ll need it for when we go post quantum!

🧡 A Message to the Bitcoin Community What happened with the Coldcard exploit is deeply painful. People who have worked hard to take control of their own Bitcoin and become more financially sovereign have taken a serious hit. And when someone has spent years building, educating, and contributing to this space, they feel that pain just as deeply. But this moment doesn’t define the future. Bitcoin has never promised an easy road. Setbacks happen, lessons are learned, and resilient communities come back stronger. For now, take a breath. Step away from the noise. Have a beer, clear your mind, and move forward with patience and perspective. 🧡🍻🙏 #SoftPCEStrongDemand #AMZNMissesButRallies #MSFT450BInADay $BTC $ETH $SNDK

🚨BREAKING: More than $38M worth of Bitcoin (594.48 $BTC ) has been stolen from around 500 wallets. Following the incident, Coldcard has urged some users to move their Bitcoin after identifying a vulnerability affecting certain devices. The warning applies to seeds generated on Mk3 wallets running firmware 4.0.1 and later, with some older Mk4, Mk5 and Q firmware also under review. Researchers are investigating the theft, but a direct link between the stolen funds and the Coldcard vulnerability has not been confirmed. If you're using an affected device, it's worth reviewing the latest guidance and checking whether your wallet could be impacted.

THIS IS INSANE. $40,000,000 in $BTC was stolen because of the Coldcard wallet vulnerability. The attacker exploited a flaw in Coldcard's key generation and stole these funds within 25 minutes. Even cold wallets aren't safe now.

Check in on your fellow Bitcoiners. If you know someone using a potentially affected Coldcard, make sure they're aware of the recent security incident. We've seen a meaningful increase in bitcoin deposits to Strike as customers review their custody setup. Strike is not affected by this incident. If you're reviewing your own setup, our team is here to help. Strike supports free bitcoin deposits, unlimited free bitcoin withdrawals, and security features like PIN, 2FA, and more, so you can move and store your bitcoin whenever you choose.

COLDCARD BTC MIGRATION VIDEO Here is an explainer video showing you how to do two things: 1. Set up a Casa multisig with your current Coldcard and send the assets from the Coldcard to the multisig. This eliminates the risk of loss from the CC vulnerability. Useful for people who only have a CC and don't want to send to an exchange or hot wallet. 2. Second part of the video (starting around minute 7) shows moving assets out of the Coldcard Mk3 single sig. This might be useful for anyone trying to move their assets right now that hasn't touched their CC in 4 years. Doing this was a fun reminder of how using a Coldcard outside of Casa is still surprisingly hard even though I know the gist of it and have been doing this for 8 years 😂. If you want help migrating to Casa, DM me or the Casa account and we will direct you to the team.

More than $38 million worth of Bitcoin has reportedly been stolen due to a vulnerability affecting Coldcard wallets. Funds from approximately 500 wallets were transferred to the hacker’s address, totaling 594.48 $BTC . Cold wallet holders, still sleeping well? If this is Bitcoin now, imagine it with quantum computing...

If you have Bitcoins on a Coldcard, move those coins away ASAP. If you used the seed generated on a Coldcard for anything, retire it ASAP. Coldcard seed generator is insecure and your coins are at risk.