sats_saviour @Cryptstock9

@anant_tap @nithusezni @Digvijay_BTC @nvk You think more people are gonna keep looking at its code in the future as they go out of business and become irrelevant? It failed even when it stayed relevant

@Digvijay_BTC The reason coldcards bug has been out of sight for over 5years is because of lack of eyes to review its code changes.its true that it now attracted a lot of eyes,but how long will it last?Its eventually gonna go out of business and will have even less eyes, so stupid bet to take

Imagine the ledger supply chain attack happened before CC and we (maxis) were larping about how safe we were because we have a clear case. All while the device generated entropy was pure shit. Many of us probably would have been doing that. Something to think about.

Michelle Weekley @michelleweekley

2 weeks ago

Coldcard trying to dunk on Ledger for a third party hack is a BOLD move. I can’t wait to see Coinkite and NVK both sued into oblivion. What an absolute disgrace.

75 44 595 53K 16

@greynguyen Integrate with Motra(trainfitness)app please

Multisig just exposed a new problem. The hardware wallets themselves. Think about that. Bitcoiners were told one key was too dangerous. “Use multisig.” So they created three keys. Then Coldcard happened. If those keys came from the same vulnerable manufacturer, your “redundancy” might not be as redundant as you thought. So now the answer is MULTI-VENDOR multisig: Three keys. Multiple manufacturers. Different devices. Different backups. Multisig wallet descriptors. Different locations. Which raises one hell of a question: If the problem is trusting ONE hardware wallet… how many layers of redundancy are enough? The Coldcard vulnerability exposed a legitimate risk: Your private key is only as unpredictable as the entropy that created it. A 256-bit seed generated from defective randomness doesn’t magically have 256 bits of effective security. Multi-vendor multisig offers a clever solution. Instead of trusting one manufacturer three times, generate keys using different manufacturers. If one vendor has a catastrophic vulnerability, ideally the other keys remain secure. That is REAL redundancy. For institutions, corporations, shared treasuries and sophisticated individuals, that can be incredibly powerful. I’m not arguing against it. I’m asking where the logic leads. If manufacturer diversification is necessary, why stop there? Different hardware architectures? Different firmware codebases? Different wallet software? Different entropy sources? Different backup methods? Different geographic locations? At some point you have to TRUST something. Bitcoiners sometimes lose sight of what we’re actually trying to accomplish: Generate an unpredictable secret. Keep it private. Sign transactions securely. Maintain the ability to recover it. That’s the job. A properly generated 256-bit secret doesn’t become more unpredictable because you own three hardware wallets. Multisig gives you redundancy against certain FAILURE MODES. Here’s what I find fascinating about the Coldcard incident: Some people walked away thinking: “This proves everyone needs multisig.” I walked away thinking: “This proves HOW your entropy is generated matters.” Those aren’t the same lesson. Multi-vendor multisig diversifies trust. Hardened single-sig minimizes complexity by getting ONE secret generated and protected correctly. Both have tradeoffs. Neither should become Bitcoin religion. If you’re protecting a corporate treasury where no individual should have unilateral control, I’d WANT multisig. If you’re an institution protecting serious Bitcoin wealth, I’d expect redundancy and multiple independent controls. If you understand multisig deeply and prefer it, fantastic. But if you’re an average Bitcoiner learning self-custody, I don’t think the lesson from defective entropy should automatically be: “Go buy three different hardware wallets.” The lesson should be: UNDERSTAND WHAT YOU’RE TRUSTING. You can diversify devices forever. But every layer of redundancy comes with a tradeoff. That’s why I reject security absolutism from BOTH camps. “Everyone needs multisig.” Wrong. “Multisig is unnecessary.” Also wrong. Your threat model matters. Your technical competence matters. Who needs access matters. Your recovery plan matters. And now, HOW YOUR KEYS WERE GENERATED matters. Bitcoin gives us the ability to secure wealth with mathematics instead of permission. But mathematics can’t decide how complicated your custody architecture should be. YOU have to decide which risks you’re willing to accept. So maybe the question after Coldcard shouldn’t be: “Single-sig vs. multisig?” Maybe it’s something more fundamental: If every self-custody setup requires trust somewhere… where are YOU willing to place yours?

@ClintonArnyd @tobknoll Scammer

The idea that we were plugging this stupid fucking piece of shit into a 9 volt battery in order to mitigate extremely esoteric NSA level electromagnetic attacks meanwhile it had worse entropy than a fucking trezor one is just… bro WTF are we kidding with this shit???!

This is worse than any previous Bitcoin exchange hack. It is arguably one of the worst things that could happen. The popular hardware wallet COLDCARD has a faulty random number generator (RNG). Funds are being drained from ordinary users’ hardware wallets as you read this. Users first reported to Block less than 24 hours ago that funds were moving out of their wallets. The exploit was most likely discovered with the help of AI. Block has confirmed that the RNG is broken. You know what that means. There are likely already multiple attackers competing for the affected BTC. Many more will join very soon. Nobody knows how much BTC is affected. Nobody knows how many users are affected. This attack has only just begun, and it will continue until all affected BTC has been drained unless users secure their funds first. Inevitably, many Bitcoiners will not hear about the incident early enough to respond in time. I am truly saddened for everyone affected, especially those who may have just lost their life savings. The worst part is that they did everything right.

I miss Andreas Antonopoulos – I hope he's doing great and I wish him the best. A true legend.

We hold the underlying asset. You do not fuck with us.

.@Ocean_mining has reached 1 Eh/s, which is about 1/500th of the current #bitcoin hashrate.

Pledditor @Pledditor

3 years ago

Ordinals are a bug. Help squash the bugs by mining with @Ocean_Mining, using #Ordisrespector or #Knots block templates.

25 23 183 39K 3

Bitcoin was created so that you don't have to care what SEC does, yet so many people care

I am a #Bitcoin PERMABULL BUT It’s important for people to know that I am quite young and can afford to lose everything I have in Bitcoin and be fine. I have no mortgage, no car payment, no student debt, no children and no health problems (that I know of). Be cautious with over-extending yourself listening to toxic psychopaths online and NEVER take financial advice from a Chad meme account on X. CHEERS 🍻 LETS HAVE A GOOD WEEK

#Bitcoin has some of the smartest and dumbest supporters. I’ll let you choose which is which.

Bitcoiners are actually at the level now where they think software's function is literally whatever it ended up being regardless of the initial intention of the developers. Bugs? Nope, just rewrite helper files. Spam? No such thing. A protocol can only be used, never abused.

My $20 DCA is not priced in #bitcoin

Cheers to the weird ones who brought #Bitcoin this far. They're coming.

. @Excellion

Hey can someone give info about all the fees involved with using #Aquawallet? I think you guys should mention it on your site @AquaBitcoin