Move your Bitcoins ASAP: https://x.com/COLDCARDwallet/status/2082961993070247948
COLDCARD硬件钱包私钥随机数漏洞实锤。
Move your Bitcoins ASAP: https://x.com/COLDCARDwallet/status/2082961993070247948
>>62544259
this board is dead. the biggest self-custody news this year by far and a thread about it gets zero replies after more than an hour. grim.
这版死了。今年最大的自托管新闻，帖子发了一个多小时零回复。真惨。
>>62544496
never heard of it, if you still rely on hardware wallets in 2026 you are mentally retarded
没听说过，如果2026年你还在靠硬件钱包，那你脑子有病
>>62544496
>>62544259
This is why I keep 162k on coin base
这就是为啥我在coin base上存了16.2万
Imagine trusting your whole stack to a single wallet vendor
想想把全部身家托付给一个钱包厂商
>>62544529
I've heard far worse things about exchanges than I ever have about trezor.
关于交易所的烂事我听过的比关于trezor的多多了
>>62544544
Couldn't be me
反正我不会那样
>>62544545
Just make your own seed you stupid monkey. I picked my favorite book and took 24 random words from it
自己生成助记词啊，蠢猴子。我挑了自己最喜欢的书，从中随机取了24个词
>>62544582
>Huckleberry Finn, my favorite book!
>《哈克贝利·费恩历险记》，我最爱的书！
>Seed: nigger nigger nigger nigger...
>助记词：黑鬼 黑鬼 黑鬼 黑鬼...
Story hasn't fully developed but still pretty funny that the maxi fag wallet got compromised before the data breached ledger wallets. Turns out etfs are the best.
故事还没完全展开，但挺好笑的，那个死忠粉的钱包先被攻破了，而泄漏数据的ledger钱包还没事。结果证明etf才是王道。
>>62544582
what did you do with the 24 words? if you used a compromised program to generate your keypair then it doesn't matter where the seed came from.
你拿那24个词干嘛了？如果你用了被攻破的程序生成密钥对，那种子从哪来都没用。
>>62544496
All the niggers here are sucking cex dicks.
这里一堆人在舔交易所的屁眼。
>>62544860
See? Etfs are best goybase are best, hardwwre wallets are baaad saaar, i would say all of these are glownigger accounts, but they are just probably the goylems of the goylem.
看到了吧？etf最好，goybase最棒，硬件钱包坏坏的，我会说这些都是“glownigger”账号，但他们大概只是goylem中的goylem。
500BTC stolen. what a score.
被盗了500个BTC。真是一票大的。
Coinkite maker nvk (Rodolfo Novak) is Jewish.
Coinkite的创始人nvk（Rodolfo Novak）是犹太人。
Certainly is a cohencidence.
还真是个“巧合”（cohencidence）。
Coincard was always just a marketing meme
Coincard从来就只是个营销噱头
It's not open source. You don't have dozens of diy projects and other hardware wallets based on it like with trezor. Just a shizo with a huge ego who got the most fundamental part wrong.
它不是开源的。你没有像trezor那样几十个DIY项目和别的硬件钱包基于它。就是个自大狂精神病，在最基本的地方搞砸了。
Not even a huge bug. He linked the rng to the wrong library. I feel sorry for all the suckers who bought into his marketing campaign
甚至不是个大bug。他把随机数生成器链接到了错误的库。我为那些被他营销骗进去的傻子感到难过
This is a huge blow for bitcoin and self custody
这对比特币和自托管是个重击
Would a passphrase solve this issue?
加个密码短语能解决这个问题吗？
>>62545345
yes. but it only buys you some time unless the passphrase itself has 80+ bits of entropy.
能。但只能拖点时间，除非密码短语本身有80位以上的熵。
The hacker seems to be lazy and went for easy pickings. Weak passphrases are probably next on the list now that the explot is known to everyone
黑客看起来挺懒的，专挑软柿子捏。现在漏洞公开了，弱密码短语大概就是下一个目标
Seed signer or gtfo
Seed signer，不然就滚
Also it's not just the mk3. But it has the weakest entropy from what I understand. Other devices with bad firmware are also affected
而且不只是mk3。但据我了解它的熵最弱。其他固件有问题的设备也受影响
>>62544496
Who the fuck is using cold card?
他妈谁在用cold card？
crazy that an autist maxxed maxxi wallet gets pwned
竟然一个死忠粉的maxxi钱包被攻破了，真疯狂
people trust firmware pushed by a company with 5 employees or something over the big dawggs?
人们竟然信任一个只有5个员工左右的公司推的固件，而不是那些大佬？
>>62544259
>>62544496
>>62544505
I have a Q that i used dice to generate the seed. I have no idea what firmware it's on. Have a bip-39 passphrase in place too so probably fine but maybe i should send back to a my Trezor..
我有个Q，我用骰子生成的助记词。我不知道它是什么固件。也加了bip-39密码短语，所以大概没事，但也许我该把钱转回我的Trezor..
>>62544496
It's a dead board and of the few humans that remain, not all will be in crypto, of those that are not all will use hardware wallets, and of those that do it will be Ledger or Trezor.
这是个死板块，剩下的人里，不是所有都会碰加密，碰的人里不是所有都会用硬件钱包，用的里面也只会是Ledger或Trezor。
The amount here who will care about "Coldcard" is minimal.
这里会在意“Coldcard”的人数极少。
I bought an mk3 about 5 years ago and the ux/ui was so terrible that I just never used it kek left curve wins again
我大概5年前买了个mk3，那用户体验太烂了，我压根没用过，kek，左曲线又赢了
If you didn't roll 100 dice to generate your own seed then you're retarded.
如果你没掷100个骰子生成自己的助记词，那你就是弱智。
>>62544259
JUSTcard
>>62545364
ledgers tech is solid but they keep fucking leaking their customers data so nobody trusts them, lmao
Ledgers的技术很扎实，但他们老是把客户数据泄露出去，所以没人信他们，笑死
>>62545473
dice bypass the shitty rng code.
骰子绕过了那破随机数代码。
And instead of switching you can do a 2-of-2 multisig setup with cc and trezor.
而且你也不用换，可以搞个2-of-2多重签名，用cc和trezor搭配。
>>62544259
Nobody on biz uses this trash
biz上没人用这垃圾货
>>62544259
NVK more like NVGay
NVK不如叫NVGay
But seriously, who would ever trust a shitskin with a face like this?
说真的，谁会信一个长这样脸的shitskin？
Shouldn't this be a bigger story?
这事儿不该闹得更大吗？
>>62544496
this is just the people who care during a price winter. when a bull run happens you'll find all the fags that suddenly start shilling crapto again.
这只是熊市里关心的人。等牛市一来，你就会看到那些傻逼又突然跳出来吹加密货币了。
>>62544259
>>62544496
i have all my bitcoins in metamask
我所有比特币都放在metamask里
>>62545361
maxis
>>62547323
you basically have to buy it from ledger store on amazon. jeff bezos has a good track record. no need to worry about fakes because of how secure element mutual authentication works.
基本只能从亚马逊上的ledger官方店买。杰夫·贝索斯信誉不错。不用担心假货，因为有安全元件互相认证机制。
>>62547920
More reasons to laugh now with stolen millions
更多理由现在笑，被偷了几百万 ┃ kek，我刚入币圈时买过一个。那硬件垃圾得要死。
kek I bought one of these when I first got into crypto. the hardware was fucking trash.
kek，我刚入币圈的时候买过一个这东西。硬件烂得一批。
>>62545351
>>62545345
>>62545473
If you were just going to use a passphrase for your wallet's entropy, then there was no point to generating 12 words (that you might forget).
如果你本来就想用密码短语当钱包熵，那生成12个单词（可能还会忘）根本没意义。
>>62544496
this isn't trezor or ledger or jade or something used by normal people
这不是trezor、ledger或jade那种普通人用的玩意儿
>>62544496
IDK wtf a coldcard is... Is it just a competitor to ledger?
我真不知道coldcard是啥……就是ledger的竞争对手吗？
>>62544496
I've cashed out like 80-85% of my stack and i don't care anymore about crapto. I've won already. Never cared about "cold wallets". Never cared to learn what a blockchain is. To me cryptoshit is just internet funny gambling money. Imagine being a tech nerd shitting on a whole board because no one cares about cold wallet glitch, lol.
我已经套现了大约80-85%的仓位，不再在乎加密货币了。我已经赢了。从来不在乎什么“冷钱包”。也懒得学区块链是啥。对我来说，加密屎就是网上的搞笑赌博钱。想象一下，某个技术宅因为没人在乎冷钱包漏洞就对着整个版块喷，哈哈。
I wonder if this primarily affects older purchased devices. My stack was fine on fw 1.2.x from 2024 but I moved it to offline dice today, a whole 2 days they could have taken it but didn't.
我想知道这主要影响旧设备吗。我2024年的固件1.2.x上的币没事，但我今天已经转到离线骰子了，整整2天他们本来能偷走但没动。
>>62544638
Lmao
Damn I was gonna buy one of these in the next few months to move my funds out of coinbase.... Guess not.
操，我本来打算过几个月买一个，把资金从Coinbase挪出来的……看来算了。
>>62544259
>not your keys not your crypto
>不是你的钥匙就不是你的币 ﹆ >别把比特币放在币安上，兄弟
>dont keep your bitcoin on binance bro
老哥，别把比特币放在币安上啊。
I am glad cold wallet faggots are getting raped ngl. Their cockiness was annoying.
说实话我很高兴冷钱包那帮傻逼被坑了。他们那副傲慢样真烦人。
>>62544259
Lol I cant help but laugh. How many stories of people losing their life savings is it gonna take to stop using qnd holsing this bullshit "air" currency. I used to read stories on ledger every week on reddit for fun where, and its almost always the same story, where the victim wakes up to see all their coins gone and cant pinpoint what he did wrong and how he was extra careful. If you lost a million dollars, hell even 50k let alone 1 million dollars, thats the type of shit that will destroy a family, marriage whatever and you wanna put your money into it? Yea its fucking retarded. It'll just get worse.till they find the mother of all hacks and its open season on all wallets you dumb asses and you wonder why we are mean at crypto fags lol what a retard you are.
哈哈我忍不住笑。到底要有多少人丢光毕生积蓄的故事，你们才肯停止使用和持有这种狗屁“空气”货币？我以前每周都在Reddit上看Ledger的故事当乐子，几乎每次都是同一个套路——受害者醒来发现所有币没了，根本想不通自己哪儿错了，还觉得自己特别小心。如果你亏了一百万，哪怕5万甚至百万，那玩意儿足以毁掉家庭、婚姻什么的，你还想把钱投进去？对，就是纯傻逼。而且只会更糟，直到他们找到终极黑客漏洞，对所有钱包大开杀戒，你们这群蠢货到时候还会纳闷我们为啥对币圈傻逼这么刻薄哈哈，你真是个大傻逼。
>>62544582
Someone with a $20 ai subscription and library card will crack your password
有人花20块订阅AI加一张图书馆借书卡就能破解你的密码。
>>62552139
This kek
哈哈笑死。
>>62544496
i've been on /biz/ for over 5 years and never heard of goldcard
我在/biz/混了5年多，从没听说过goldcard。
fuck off retard nobody cares
滚远点傻逼，没人关心。
>>62544496
I have literally never heard of COLDCARD but by all means keep crying.
我真的从没听说过COLDCARD，但你尽管哭吧。
>>62544582
>one book
>一本书
OH NONONONONONONONONONONONONO
（如果你觉得这篇文章有启发，可以点击这里付费）
