URGENT: ColdCard Users NEED TO ACT NOW or LOSE THEIR BITCOIN
The Canadian Bitcoiners Podcast - Bitcoin News With a Canadian SpinShow Notes
🚨 URGENT BITCOIN SECURITY ALERT 🚨A critical security flaw has hit older Coldcard hardware wallets, resulting in a massive on-chain sweep where roughly 594 BTC (valued at over $38 million) was stolen from hundreds of single-signature wallets. Coinkite has issued an urgent warning regarding Coldcard Mk3 devices (and certain firmware versions) where the device generated entropy was dangerously low....dropping from the expected 128 bits down to roughly 40 bits.In this live stream, we break down:• Exactly what went wrong with the Coldcard Mk3 random number generator (RNG) / entropy fallback.• How attackers were able to brute-force and sweep vulnerable wallets.• Which models and firmware versions are affected (Mk3 vs. Mk4/Mk5/Q).• Step-by-step instructions on what you need to do RIGHT NOW if you generated a seed on an affected device.• Temporary mitigations (like strong BIP-39 passphrases) vs. permanent migration.Don't panic, but take action immediately. Drop your questions in the live chat!---🔗 RESOURCES & OFFICIAL ADVISORIES:• Coinkite Official Blog / Security Notice: https://blog.coinkite.com/• Check Mempool Transaction Details: https://mempool.space/• Coldcard Vulnerability & Wallet Entropy Best Practices: https://btcmaxis.com/article.html?id=7554e7cb-d8aa-45d5-95c8-adea8d87ea23---The Canadian Bitcoiners Podcast - New episodes weekly.X: https://x.com/CanadianBTCPodJoey: https://x.com/joeytweeetsLen: https://x.com/thebtcpricebotSite: https://canadianbitcoiners.com#Bitcoin #Coldcard #CryptoSecurity #HardwareWallet #CryptoNews
More from The Canadian Bitcoiners Podcast - Bitcoin News With a Canadian Spin
MSCI adopted its non-operating company rule on October 15, and the companion spreadsheet of potentially impacted securities lists Strategy with a potential action of "Deleted" — roughly $40.3B of the $44.4B of float-adjusted market cap on that entire list. The affected names publish November 11 and the change takes effect at the close on November 30, leaving 19 days between the list and any forced selling. MSTR dropped 9.56% in a single session after the decision. Tonight, Joey and Len walk through the 4-of-5 ratio test, whether Strategy actually trips it, and what index removal does and does not do to the Bitcoin sitting behind the stock. MSCI's announcement names no company, and Strategy says MSCI-linked funds hold only 3.1% of its basic shares.
MSCI adopted its non-operating company rule on October 15, and the companion spreadsheet of potentially impacted securities lists Strategy with a potential action of "Deleted" — roughly $40.3B of the $44.4B of float-adjusted market cap on that entire list. The affected names publish November 11 and the change takes effect at the close on November 30, leaving 19 days between the list and any forced selling. MSTR dropped 9.56% in a single session after the decision. Tonight, Joey and Len walk through the 4-of-5 ratio test, whether Strategy actually trips it, and what index removal does and does not do to the Bitcoin sitting behind the stock. MSCI's announcement names no company, and Strategy says MSCI-linked funds hold only 3.1% of its basic shares.
Ledger has confirmed an unauthorized hardware implant in an affected device sold through CryptoBilis, a reseller listed by Ledger. How can a hardware wallet pass a Genuine Check while a physical implant spies on its setup? Tonight, Joey and Len examine the reported supply-chain attack, the limits of device verification, and what this does to trust in self-custody. Loss totals remain third-party estimates; the confirmed implant does not establish that every Ledger device is compromised.
Ledger has confirmed an unauthorized hardware implant in an affected device sold through CryptoBilis, a reseller listed by Ledger. How can a hardware wallet pass a Genuine Check while a physical implant spies on its setup? Tonight, Joey and Len examine the reported supply-chain attack, the limits of device verification, and what this does to trust in self-custody. Loss totals remain third-party estimates; the confirmed implant does not establish that every Ledger device is compromised.
Ari Paul alleges Coinbase lost $25 million of BlockTower's money and concealed more than $1 billion in hack losses. Coinbase denies hiding a series of hacks or losing $1 billion, and Paul's claims remain unverified. Tonight, Joey and Len break down the allegations, Coinbase's response, and the risks of trusting someone else with your Bitcoin.