Post #4408026

2026-08-05 10:03 UTC

I was gonna link someone else’s observations on it, but got sidetracked by a shiny object or something. mastodon.catgirl.cloud/@49016/117021988214007605 They didn’t link the sources, but apparently the all-my-apes-gone twitter crowd are still breathtakingly ignorant of technology and statistics, despite how many years of bitcoin catastrophes have passed. Quite a few people suggesting/using dice to mitigate the Coldcard vulnerability. Note that common dice are not designed to be cryptographically secure. If you are going to do this, you probably should buy precision casino dice. And even then, have another source of entropy. Posted entirely unironically, apparently. Hard to say, but Poe’s law has yet t be repealed.

Replies (2)

@Soyweiser@awful.systems 2026-08-06 06:12

apparently this issue became obvious YEARS AGO since the birthday problem struck a random redditor, who promptly got gaslit that this is completely impossible and it was dismissed. lol. lmao even Hahaha

Open ##4408025
@Architeuthis@awful.systems 2026-08-06 10:44

New things I think learned from this thread: the thief used a blockchain provider instead of an ad-hoc local node, making all the transactions incredibly traceable with (unclear to me) implications about their ability to launder them or keep their identity concealed indefinitely. even if they are found out, the previous owners probably won’t see a dime back since the vulnerability affects exactly the ability to prove you really were the previous owner. Unclear which thief since the web3isdoinggreat writeup says there had been up to 15 unique groups doing mass drains by 31/7, maybe the initial 500 wallet sweep.

Open ##4414701