COLDCARD RNG incident the public record, collected and explained
Informational only, and this site never asks for your seed words. details

Informational only. This is an open source collection of what others have published about the incident, together with an explanation of it. It is not financial, security or legal advice, and not a substitute for professional advice about your own situation. It is not affiliated with, endorsed by, or speaking for Coinkite. Material is attributed and quoted as published; where sources disagree their scenarios are kept separate with their assumptions rather than reconciled into one answer. Everything is meant to be checked against the linked evidence rather than taken on trust. Act on your own judgement about a particular situation. Editorial standards and corrections.

Do not disclose recovery material to a website, form, message or support account. This site never asks for it, and contributions containing recovery words or private keys are not accepted.

Full panic - one of my wallets was drained

reddit-full-panic-drain-report

https://www.reddit.com/r/Bitcoin/comments/1vatgl4/full_panic_one_of_my_wallets_was_drained/

Latest reviewed change

source content difference between and

The thread lost a comment by Aflockofants arguing that Bitcoin has become a get-rich-quick scheme for wealthy Westerners.

seen +0 -10 full history below 
 It could be that someone bought a lot of devices, set them up with his own seedphrase and  then sold the devices as "used" and maybe some people who bought the devices did not reset them - so they used the already existing wallet of the scammer.
 
 There are many way how someone can fail, but normally if you buy a good hardware wallet directly from the company that builds it, you should be safe when you use the wallet as intended and create a fresh seedphrase & wallet if you use it the first time.
-
-comment: p0poz41
-parent: t1_p0occls
-author: Aflockofants
-created_utc: 1785433688

First lines only. The complete diff is in the timeline below.

Organisation
r/Bitcoin
Evidence role
First-hand account
Published
2026-07-30
Source changes
13
Detected differences
13
Unreviewed
0
Copies held
14

The first public drain report, posted on 30 Jul 2026 while the sweep was still ongoing: a wallet untouched since 2021, drained for roughly 0.8 BTC. This is the thread Kevin Loaec's call for corroboration and the first Stacker News report both reference, which makes it the start of the public record.

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked .

  1. source content difference between and Current source content +0 -10

    The thread lost a comment by Aflockofants arguing that Bitcoin has become a get-rich-quick scheme for wealthy Westerners.

    seen · Captured here 118,549 chars
    What changed from the previous capture 10 lines 
     It could be that someone bought a lot of devices, set them up with his own seedphrase and  then sold the devices as "used" and maybe some people who bought the devices did not reset them - so they used the already existing wallet of the scammer.
 
 There are many way how someone can fail, but normally if you buy a good hardware wallet directly from the company that builds it, you should be safe when you use the wallet as intended and create a fresh seedphrase & wallet if you use it the first time.
-
-comment: p0poz41
-parent: t1_p0occls
-author: Aflockofants
-created_utc: 1785433688
-edited: false
-body:
-Yet when Bitcoin defenders talk about Bitcoin, it’s almost always mixed with some bullshit about how it will give poor people a chance, all kinds of initiatives in the developing world, yadayadayada. Just admit that by now it’s a get-rich-quick scheme for people in the Western world that have some money surplus.
-
-I’ve been a software developer for over 30 years and even mined some Bitcoin with my own PC back when that was still viable. I’m fully aware of how most people won’t be able to fully secure their own wallets. You’re never gonna be able to defend this idealistic story on how it will change the world and will protect us from tyrannical governments, while at the same time claiming people are morons for not being able to secure their own wallets. I took off when I saw that all the idealistic nonsense was just that: nonsense. To justify this whole thing where a few people are getting outrageously rich.
 
 comment: p0ppfdk
 parent: t1_p0pj122
    Extracted text as captured 
    post: 1vatgl4
author: s1ammage
created_utc: 1785417575
title: Full panic - one of my wallets was drained
body:
I haven’t done anything since creation except sending into the wallet. 

comment: p0nzoe2
parent: t3_1vatgl4
author: [deleted]
created_utc: 1785417688
edited: 1785843572
body:
[removed]

comment: p0nzovn
parent: t3_1vatgl4
author: s1ammage
created_utc: 1785417692
edited: 1785418501
body:
The only thing I can think of is I got coldcards from the site in January and entered my seed into the coldcard. Set up the wallet to test my phrase and setup watch only.

I was worried I didn’t write down my seed phrase right, so I bought a coldcard to test it. Never hooked it up into a computer. Just the SD card.

comment: p0nzwz2
parent: t1_p0nzovn
author: Acceptable-Leek1546
created_utc: 1785417756
edited: false
body:
I would assume this is what caused it to be drained. Never enter seed phrase anywhere. 

comment: p0o03cx
parent: t3_1vatgl4
author: Play-Resident
created_utc: 1785417808
edited: false
body:
someone will have a great summer holiday now

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  2. source content difference between and source content +2 -3

    A comment by SharpGame83 was redacted: the author became [deleted] and the body became [removed].

    seen · Captured here 119,571 chars
    What changed from the previous capture 5 lines 
     
 comment: p0o6p3l
 parent: t1_p0o3npz
-author: SharpGame83
+author: [deleted]
 created_utc: 1785419667
 edited: false
 body:
-Honestly I get this now, when I first heard about bitcoin etfs I wondered who would prefer this over actual bitcoin? Old people?  
-Now after getting half a btc stolen from my blockchain wallet I’m like , ahhh ya I get it now
+[removed]
 
 comment: p0o6p74
 parent: t1_p0o3tag
    Extracted text as captured 
    post: 1vatgl4
author: s1ammage
created_utc: 1785417575
title: Full panic - one of my wallets was drained
body:
I haven’t done anything since creation except sending into the wallet. 

comment: p0nzoe2
parent: t3_1vatgl4
author: [deleted]
created_utc: 1785417688
edited: 1785843572
body:
[removed]

comment: p0nzovn
parent: t3_1vatgl4
author: s1ammage
created_utc: 1785417692
edited: 1785418501
body:
The only thing I can think of is I got coldcards from the site in January and entered my seed into the coldcard. Set up the wallet to test my phrase and setup watch only.

I was worried I didn’t write down my seed phrase right, so I bought a coldcard to test it. Never hooked it up into a computer. Just the SD card.

comment: p0nzwz2
parent: t1_p0nzovn
author: Acceptable-Leek1546
created_utc: 1785417756
edited: false
body:
I would assume this is what caused it to be drained. Never enter seed phrase anywhere. 

comment: p0o03cx
parent: t3_1vatgl4
author: Play-Resident
created_utc: 1785417808
edited: false
body:
someone will have a great summer holiday now

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  3. source content difference between and source content +10 -9

    A comment recommending Trezor and a hidden passphrase wallet was added, and a comment advising victims to broadcast timestamped signed messages with the compromised key was removed.

    seen · Captured here 119,787 chars
    What changed from the previous capture 19 lines 
     edited: false
 body:
 The coldcard comes with a few safety measures to keep you from getting scammed. Did you ignore them ?
+
+comment: p0p6ih2
+parent: t1_p0omvua
+author: minimorsels
+created_utc: 1785429031
+edited: false
+body:
+I recommend trezor and setting up a hidden passphrase wallet
 
 comment: p0p6nla
 parent: t1_p0o8vw5
 body:
 how???
 
-comment: p12vdx8
-parent: t3_1vatgl4
-author: lemannequin
-created_utc: 1785595994
-edited: false
-body:
-If I were a victim, I'd aim to broadcast ASAP a timestamped, signed message (signed with the compromised PK) as a proof/evidence to claim legit ownership, before other bad actors would try to do the same (and they will try to, if there's a slighly chance for funds to be restored to victims).   
-I'd sign the message and paste it on a few platforms, like Github Gists, here in Reddit, Twitter. Maybe even to the Bitcoin blockchain itself, as a hash (or as arbitrary data within the limits of OP\_RETURN). 
-
 comment: p13ux08
 parent: t1_p0q7757
 author: Eastern-Try-6207
 
 more-stub: parent t1_p0o7000 count <live-count>
 
+more-stub: parent t1_p0p6ih2 count <live-count>
+
 more-stub: parent t1_p0omvua count <live-count>
 
 more-stub: parent t1_p0ohlvy count <live-count>
    Extracted text as captured 
    post: 1vatgl4
author: s1ammage
created_utc: 1785417575
title: Full panic - one of my wallets was drained
body:
I haven’t done anything since creation except sending into the wallet. 

comment: p0nzoe2
parent: t3_1vatgl4
author: [deleted]
created_utc: 1785417688
edited: 1785843572
body:
[removed]

comment: p0nzovn
parent: t3_1vatgl4
author: s1ammage
created_utc: 1785417692
edited: 1785418501
body:
The only thing I can think of is I got coldcards from the site in January and entered my seed into the coldcard. Set up the wallet to test my phrase and setup watch only.

I was worried I didn’t write down my seed phrase right, so I bought a coldcard to test it. Never hooked it up into a computer. Just the SD card.

comment: p0nzwz2
parent: t1_p0nzovn
author: Acceptable-Leek1546
created_utc: 1785417756
edited: false
body:
I would assume this is what caused it to be drained. Never enter seed phrase anywhere. 

comment: p0o03cx
parent: t3_1vatgl4
author: Play-Resident
created_utc: 1785417808
edited: false
body:
someone will have a great summer holiday now

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  4. source content difference between and source content +0 -8

    A comment by mindylynx reading 'aaand that's why i still use paper wallets' was removed from the thread.

    seen · Captured here 120,194 chars
    What changed from the previous capture 8 lines 
     edited: false
 body:
 For bitcoin to become mainstream, people will have wallets where they dont own the private keys.
-
-comment: p0rj5gs
-parent: t3_1vatgl4
-author: mindylynx
-created_utc: 1785451349
-edited: false
-body:
-aaand that's why i still use paper wallets 
 
 comment: p0rj8rb
 parent: t3_1vatgl4
    Extracted text as captured 
    post: 1vatgl4
author: s1ammage
created_utc: 1785417575
title: Full panic - one of my wallets was drained
body:
I haven’t done anything since creation except sending into the wallet. 

comment: p0nzoe2
parent: t3_1vatgl4
author: [deleted]
created_utc: 1785417688
edited: 1785843572
body:
[removed]

comment: p0nzovn
parent: t3_1vatgl4
author: s1ammage
created_utc: 1785417692
edited: 1785418501
body:
The only thing I can think of is I got coldcards from the site in January and entered my seed into the coldcard. Set up the wallet to test my phrase and setup watch only.

I was worried I didn’t write down my seed phrase right, so I bought a coldcard to test it. Never hooked it up into a computer. Just the SD card.

comment: p0nzwz2
parent: t1_p0nzovn
author: Acceptable-Leek1546
created_utc: 1785417756
edited: false
body:
I would assume this is what caused it to be drained. Never enter seed phrase anywhere. 

comment: p0o03cx
parent: t3_1vatgl4
author: Play-Resident
created_utc: 1785417808
edited: false
body:
someone will have a great summer holiday now

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  5. source content difference between and source content +0 -13

    The comment by Important-Level6672 comparing crypto thefts to fiat-era heists was removed from the thread.

    seen · Captured here 120,337 chars
    What changed from the previous capture 13 lines 
     edited: false
 body:
 Damn I need to learn more about crypto and wallets
-
-comment: p0q3ets
-parent: t1_p0occls
-author: Important-Level6672
-created_utc: 1785437349
-edited: 1785437860
-body:
-BTC isn’t easy to steal yet the top 10 biggest financial thefts of all time are all crypto related. Keep in Mind crypto only been around a fraction of the time fiat has.  
-[https://www.visualcapitalist.com/sp/ranked-the-10-biggest-digital-heists-in01/](https://www.visualcapitalist.com/sp/ranked-the-10-biggest-digital-heists-in01/)
-
-A few millions stolen in one go used to be rare asf
-
-All this “it was the users fault” only goes a long way. BTC network it self is secure but it’s a major pain in the ass to secure your funds it 24/7 or not lose it
 
 comment: p0q476s
 parent: t1_p0p4m31
    Extracted text as captured 
    post: 1vatgl4
author: s1ammage
created_utc: 1785417575
title: Full panic - one of my wallets was drained
body:
I haven’t done anything since creation except sending into the wallet. 

comment: p0nzoe2
parent: t3_1vatgl4
author: [deleted]
created_utc: 1785417688
edited: 1785843572
body:
[removed]

comment: p0nzovn
parent: t3_1vatgl4
author: s1ammage
created_utc: 1785417692
edited: 1785418501
body:
The only thing I can think of is I got coldcards from the site in January and entered my seed into the coldcard. Set up the wallet to test my phrase and setup watch only.

I was worried I didn’t write down my seed phrase right, so I bought a coldcard to test it. Never hooked it up into a computer. Just the SD card.

comment: p0nzwz2
parent: t1_p0nzovn
author: Acceptable-Leek1546
created_utc: 1785417756
edited: false
body:
I would assume this is what caused it to be drained. Never enter seed phrase anywhere. 

comment: p0o03cx
parent: t3_1vatgl4
author: Play-Resident
created_utc: 1785417808
edited: false
body:
someone will have a great summer holiday now

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  6. source content difference between and source content +2 -10

    One comment in the thread was removed and its author line changed to [deleted], replacing the original supportive text with [removed].

    seen · Captured here 121,001 chars
    What changed from the previous capture 12 lines 
     body:
 It's crazy how many hacks there have been on self custody solutions the last few years. Is there anyone keeping a tally on how much in USD (at time of theft / fraud) and how much BTC has been stolen from self custody solutions vs exchanges? I'm feeling it's getting close between them, at least USD wise. 
 
-comment: p0tz4qb
-parent: t3_1vatgl4
-author: Minute-Literature-22
-created_utc: 1785484331
-edited: false
-body:
-Really sorry for this. Hope you can recover your money.
-
 comment: p0tzrf7
 parent: t1_p0ohyzy
-author: Minute-Literature-22
+author: [deleted]
 created_utc: 1785484639
 edited: false
 body:
-This is the way. People should invest more much time in learning about btc safety.
+[removed]
 
 comment: p0u3kic
 parent: t1_p0occls
    Extracted text as captured 
    post: 1vatgl4
author: s1ammage
created_utc: 1785417575
title: Full panic - one of my wallets was drained
body:
I haven’t done anything since creation except sending into the wallet. 

comment: p0nzoe2
parent: t3_1vatgl4
author: [deleted]
created_utc: 1785417688
edited: 1785843572
body:
[removed]

comment: p0nzovn
parent: t3_1vatgl4
author: s1ammage
created_utc: 1785417692
edited: 1785418501
body:
The only thing I can think of is I got coldcards from the site in January and entered my seed into the coldcard. Set up the wallet to test my phrase and setup watch only.

I was worried I didn’t write down my seed phrase right, so I bought a coldcard to test it. Never hooked it up into a computer. Just the SD card.

comment: p0nzwz2
parent: t1_p0nzovn
author: Acceptable-Leek1546
created_utc: 1785417756
edited: false
body:
I would assume this is what caused it to be drained. Never enter seed phrase anywhere. 

comment: p0o03cx
parent: t3_1vatgl4
author: Play-Resident
created_utc: 1785417808
edited: false
body:
someone will have a great summer holiday now

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  7. source content difference between and source content +2 -20

    Reddit deleted or removed the original post author and several comments, replacing the author with [deleted] and comment bodies with [removed].

    seen · Captured here 121,251 chars
    What changed from the previous capture 22 lines 
     
 comment: p0pbvft
 parent: t1_p0ohdwk
-author: Beneficial_Past_1957
+author: [deleted]
 created_utc: 1785430395
 edited: false
 body:
-Malone found himself 
+[removed]
 
 comment: p0pc30t
 parent: t1_p0pbvft
 body:
 There has to be something somewhere? You must have clicked on something and opened your wallet 
 
-comment: p0phyuq
-parent: t3_1vatgl4
-author: rewiredrose
-created_utc: 1785431935
-edited: false
-body:
-a documentary I watched showed a lottery software guy used vulnerablities to win jackpot several times before he got caught. maybe someone knew the secrets if hardware wallet op used.
-
 comment: p0pi82x
 parent: t1_p0p9u5w
 author: s1ammage
 edited: false
 body:
 Is mij helaas ook overkomen door een valse link, 12 woorden ingevoerd en zo alles uit handen gegeven, zo vals van hun, en zo naïef van mij..
-
-comment: p0rdfln
-parent: t3_1vatgl4
-author: HayBailes69
-created_utc: 1785449625
-edited: false
-body:
-Of interest, new to bitcoin but why do people opt for wallets instead of keeping it in an exchange?
-
-I understand there’s better protection and in theory this shouldn’t happen, but this feels like a really big risk.
 
 comment: p0rdm5q
 parent: t1_p0r913j
    Extracted text as captured 
    post: 1vatgl4
author: s1ammage
created_utc: 1785417575
title: Full panic - one of my wallets was drained
body:
I haven’t done anything since creation except sending into the wallet. 

comment: p0nzoe2
parent: t3_1vatgl4
author: [deleted]
created_utc: 1785417688
edited: 1785843572
body:
[removed]

comment: p0nzovn
parent: t3_1vatgl4
author: s1ammage
created_utc: 1785417692
edited: 1785418501
body:
The only thing I can think of is I got coldcards from the site in January and entered my seed into the coldcard. Set up the wallet to test my phrase and setup watch only.

I was worried I didn’t write down my seed phrase right, so I bought a coldcard to test it. Never hooked it up into a computer. Just the SD card.

comment: p0nzwz2
parent: t1_p0nzovn
author: Acceptable-Leek1546
created_utc: 1785417756
edited: false
body:
I would assume this is what caused it to be drained. Never enter seed phrase anywhere. 

comment: p0o03cx
parent: t3_1vatgl4
author: Play-Resident
created_utc: 1785417808
edited: false
body:
someone will have a great summer holiday now

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  8. source content difference between and source content +16 -10

    The thread gained two comments discussing whether a passphrase is strong enough to protect a drained wallet and lost one spam-style comment.

    seen · Captured here 121,876 chars
    What changed from the previous capture 26 lines 
     body:
 I’m so sorry dude 
 
+comment: p0wahf2
+parent: t1_p0w3uzx
+author: Clear-Marketing5145
+created_utc: 1785513007
+edited: false
+body:
+It is enough
+
 comment: p0wgibt
 parent: t3_1vatgl4
 author: lvl99moron
 edited: false
 body:
 I’m sick, I saw this reposted on Twitter and checked my wallet for a deposit I need to put down by Monday and it’s gone, 0.25btc. Sorry they got you for even more, this is so shit 
+
+comment: p0wnt1q
+parent: t1_p0wahf2
+author: xToniGrssx
+created_utc: 1785516417
+edited: false
+body:
+Depends on the kind of passphrase he put. This bug renders the entropy to zero bits esentially, so it all boils down to the passphrase, which people don't tend to select to be that strong after 12/24 words. If it's truly a random string of 14+ chars then they are good yeah, if it's like a sentence or one or two additional words as a lot of people admittedly did, they are cooked
 
 comment: p0ww4hg
 parent: t3_1vatgl4
 If I were a victim, I'd aim to broadcast ASAP a timestamped, signed message (signed with the compromised PK) as a proof/evidence to claim legit ownership, before other bad actors would try to do the same (and they will try to, if there's a slighly chance for funds to be restored to victims).   
 I'd sign the message and paste it on a few platforms, like Github Gists, here in Reddit, Twitter. Maybe even to the Bitcoin blockchain itself, as a hash (or as arbitrary data within the limits of OP\_RETURN). 
 
-comment: p13dwo7
-parent: t3_1vatgl4
-author: AnticRaven
-created_utc: 1785601365
-edited: false
-body:
-Thanks for the capital. I’m going to buy a yacht and cry in bit coins 🪙 
-
 comment: p13ux08
 parent: t1_p0q7757
 author: Eastern-Try-6207
 
 more-stub: parent t1_p0od3uj count <live-count>
 
-more-stub: parent t1_p0w3uzx count <live-count>
-
 more-stub: parent t1_p0s0nb5 count <live-count>
 
 more-stub: parent t1_p0rrjl1 count <live-count>
    Extracted text as captured 
    post: 1vatgl4
author: s1ammage
created_utc: 1785417575
title: Full panic - one of my wallets was drained
body:
I haven’t done anything since creation except sending into the wallet. 

comment: p0nzoe2
parent: t3_1vatgl4
author: [deleted]
created_utc: 1785417688
edited: 1785843572
body:
[removed]

comment: p0nzovn
parent: t3_1vatgl4
author: s1ammage
created_utc: 1785417692
edited: 1785418501
body:
The only thing I can think of is I got coldcards from the site in January and entered my seed into the coldcard. Set up the wallet to test my phrase and setup watch only.

I was worried I didn’t write down my seed phrase right, so I bought a coldcard to test it. Never hooked it up into a computer. Just the SD card.

comment: p0nzwz2
parent: t1_p0nzovn
author: Acceptable-Leek1546
created_utc: 1785417756
edited: false
body:
I would assume this is what caused it to be drained. Never enter seed phrase anywhere. 

comment: p0o03cx
parent: t3_1vatgl4
author: Play-Resident
created_utc: 1785417808
edited: false
body:
someone will have a great summer holiday now

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  9. source content difference between and source content +0 -8

    A new [deleted]-author comment was added to the thread saying "Yeah stay away from these scam coins. Invest in the stock market".

    seen · Captured here 121,485 chars
    What changed from the previous capture 8 lines 
     
 x. Reconsider using hardware wallets. It appears this was vulnerable keygen.
 
-comment: p0u5j24
-parent: t3_1vatgl4
-author: [deleted]
-created_utc: 1785487451
-edited: false
-body:
-Yeah stay away from these scam coins. Invest in the stock market 
-
 comment: p0ueul2
 parent: t3_1vatgl4
 author: Happy-Suit-3362
    Extracted text as captured 
    post: 1vatgl4
author: s1ammage
created_utc: 1785417575
title: Full panic - one of my wallets was drained
body:
I haven’t done anything since creation except sending into the wallet. 

comment: p0nzoe2
parent: t3_1vatgl4
author: [deleted]
created_utc: 1785417688
edited: 1785843572
body:
[removed]

comment: p0nzovn
parent: t3_1vatgl4
author: s1ammage
created_utc: 1785417692
edited: 1785418501
body:
The only thing I can think of is I got coldcards from the site in January and entered my seed into the coldcard. Set up the wallet to test my phrase and setup watch only.

I was worried I didn’t write down my seed phrase right, so I bought a coldcard to test it. Never hooked it up into a computer. Just the SD card.

comment: p0nzwz2
parent: t1_p0nzovn
author: Acceptable-Leek1546
created_utc: 1785417756
edited: false
body:
I would assume this is what caused it to be drained. Never enter seed phrase anywhere. 

comment: p0o03cx
parent: t3_1vatgl4
author: Play-Resident
created_utc: 1785417808
edited: false
body:
someone will have a great summer holiday now

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  10. source content difference between and source content +1 -1

    The author line of one comment changed from the username miscellanalous to [deleted].

    seen · Captured here 121,650 chars
    What changed from the previous capture 2 lines 
     
 comment: p0u5j24
 parent: t3_1vatgl4
-author: miscellanalous
+author: [deleted]
 created_utc: 1785487451
 edited: false
 body:
    Extracted text as captured 
    post: 1vatgl4
author: s1ammage
created_utc: 1785417575
title: Full panic - one of my wallets was drained
body:
I haven’t done anything since creation except sending into the wallet. 

comment: p0nzoe2
parent: t3_1vatgl4
author: [deleted]
created_utc: 1785417688
edited: 1785843572
body:
[removed]

comment: p0nzovn
parent: t3_1vatgl4
author: s1ammage
created_utc: 1785417692
edited: 1785418501
body:
The only thing I can think of is I got coldcards from the site in January and entered my seed into the coldcard. Set up the wallet to test my phrase and setup watch only.

I was worried I didn’t write down my seed phrase right, so I bought a coldcard to test it. Never hooked it up into a computer. Just the SD card.

comment: p0nzwz2
parent: t1_p0nzovn
author: Acceptable-Leek1546
created_utc: 1785417756
edited: false
body:
I would assume this is what caused it to be drained. Never enter seed phrase anywhere. 

comment: p0o03cx
parent: t3_1vatgl4
author: Play-Resident
created_utc: 1785417808
edited: false
body:
someone will have a great summer holiday now

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  11. source content difference between and source content +0 -8

    A comment by Bmoses99 saying the drain may have been part of a broader theft was removed from the thread.

    seen · Captured here 121,655 chars
    What changed from the previous capture 8 lines 
     body:
 Remember when we talked about the risks of self custody? u/DJ\_Ben\_Frank
 
-comment: p0ywfg9
-parent: t3_1vatgl4
-author: Bmoses99
-created_utc: 1785538591
-edited: false
-body:
-sad to see this. i’ve heard this may have been part of broader theft 
-
 comment: p0yzrg3
 parent: t1_p0oqtqf
 author: Obvious_Present9780
    Extracted text as captured 
    post: 1vatgl4
author: s1ammage
created_utc: 1785417575
title: Full panic - one of my wallets was drained
body:
I haven’t done anything since creation except sending into the wallet. 

comment: p0nzoe2
parent: t3_1vatgl4
author: [deleted]
created_utc: 1785417688
edited: 1785843572
body:
[removed]

comment: p0nzovn
parent: t3_1vatgl4
author: s1ammage
created_utc: 1785417692
edited: 1785418501
body:
The only thing I can think of is I got coldcards from the site in January and entered my seed into the coldcard. Set up the wallet to test my phrase and setup watch only.

I was worried I didn’t write down my seed phrase right, so I bought a coldcard to test it. Never hooked it up into a computer. Just the SD card.

comment: p0nzwz2
parent: t1_p0nzovn
author: Acceptable-Leek1546
created_utc: 1785417756
edited: false
body:
I would assume this is what caused it to be drained. Never enter seed phrase anywhere. 

comment: p0o03cx
parent: t3_1vatgl4
author: Play-Resident
created_utc: 1785417808
edited: false
body:
someone will have a great summer holiday now

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  12. source content difference between and source content +2 -0

    ambiguous: the only change is a new collapsed-replies stub under comment p0ssb37, indicating that comment gained replies the capture does not expand.

    seen · Captured here 121,823 chars
    What changed from the previous capture 2 lines 
     
 more-stub: parent t1_p0pxjez count <live-count>
 
+more-stub: parent t1_p0ssb37 count <live-count>
+
 more-stub: parent t1_p0t8bxl count <live-count>
 
 more-stub: parent t1_p0otr3i count <live-count>
    Extracted text as captured 
    post: 1vatgl4
author: s1ammage
created_utc: 1785417575
title: Full panic - one of my wallets was drained
body:
I haven’t done anything since creation except sending into the wallet. 

comment: p0nzoe2
parent: t3_1vatgl4
author: [deleted]
created_utc: 1785417688
edited: 1785843572
body:
[removed]

comment: p0nzovn
parent: t3_1vatgl4
author: s1ammage
created_utc: 1785417692
edited: 1785418501
body:
The only thing I can think of is I got coldcards from the site in January and entered my seed into the coldcard. Set up the wallet to test my phrase and setup watch only.

I was worried I didn’t write down my seed phrase right, so I bought a coldcard to test it. Never hooked it up into a computer. Just the SD card.

comment: p0nzwz2
parent: t1_p0nzovn
author: Acceptable-Leek1546
created_utc: 1785417756
edited: false
body:
I would assume this is what caused it to be drained. Never enter seed phrase anywhere. 

comment: p0o03cx
parent: t3_1vatgl4
author: Play-Resident
created_utc: 1785417808
edited: false
body:
someone will have a great summer holiday now

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  13. source content difference between and source content +8 -16

    A participant's account was deleted, replacing three comments with deleted placeholders. The removed comments discussed possible causes of the drain and the participant's stated seed-verification and seed-generation practices.

    seen · Captured here 121,785 chars
    What changed from the previous capture 24 lines 
     
 comment: p0o0bqp
 parent: t3_1vatgl4
-author: OldHamburger7923
+author: [deleted]
 created_utc: 1785417875
 edited: 1785418199
 body:
-how did you generate your seed? did you have a passphrase? if so, was it written down? There's only a few ways for you to get hacked like this. It's usually entering your seed into something networked, like a laptop, phone, etc. Or someone accessing your phrase where you have it physically stored. Third less likely option is RNG has a bug and wallets can be exposed because it was guessable, but this one is less likely than the other two.
-
-I don't trust anything, even the RNG that comes with hw wallet, so I will generate a seed, scramble the words around, then randomly replace a few. You can use dice or a coin to make the choices too if you like. The jade is nice because you don't need to calculate the last word, it will show you the only 7(?) options that match your 23 words. Then add a passphrase on top. store the seed securely, don't store your passphrase if possible, if not, don't store it anywhere near the seed.
+[deleted]
 
 comment: p0o0q6z
 parent: t1_p0nzovn
 
 comment: p0o3w2e
 parent: t1_p0o30b3
-author: OldHamburger7923
+author: [deleted]
 created_utc: 1785418889
 edited: false
 body:
-How would that work? Every device I've used only shows the seed at creation, tells you to write it down and won't ever show it to you again. So if someone bought and returned, you'd have to set it up as a new wallet.
+[deleted]
 
 comment: p0o4hw5
 parent: t1_p0o15so
 
 comment: p0o6s9q
 parent: t1_p0o5q9c
-author: OldHamburger7923
+author: [deleted]
 created_utc: 1785419690
 edited: 1785419936
 body:
-You are getting a lot of incorrect info on this thread. Nothing wrong with restoring your seed in the wallet. That's literally how it's supposed to work. 
-
-What I do is generate seed. Write it down. Send a tiny transaction to it. Reset device, restore seed. Verify I can still access the wallet, send a test transaction to verify transfer out too. At this point I like adding a passphrase. Then I get the next address and transfer to it. I also like breaking up assets into multiple addresses so no address shows with more than 1 BTC. 
-
-There's other steps you can take too (see my other post) but this is a general guideline on how I verify and get comfortable using the wallet. Otherwise it's nerve wracking putting money into something you haven't tried out and don't know if it functions. Which also leaves you open later to misunderstanding how transfers work and you may end up doing something dumb
+[deleted]
 
 comment: p0o6x8i
 parent: t1_p0o52we
 
 comment: p0o8jsl
 parent: t1_p0o52we
-author: OldHamburger7923
+author: [deleted]
 created_utc: 1785420175
 edited: false
 body:
-Not only that, your cash at the bank isn't as secure as people think. It's not your money at the bank, it's an IOU. Dealing with fdic insurance isn't fun, takes time, has limits. Bank runs means you can't get it when you need it, etc. 
-
-Btc is yours. The government can't seize it like they can with just about anything else. 
+[deleted]
 
 comment: p0o8mc9
 parent: t1_p0o2c6u
    Extracted text as captured 
    post: 1vatgl4
author: s1ammage
created_utc: 1785417575
title: Full panic - one of my wallets was drained
body:
I haven’t done anything since creation except sending into the wallet. 

comment: p0nzoe2
parent: t3_1vatgl4
author: [deleted]
created_utc: 1785417688
edited: 1785843572
body:
[removed]

comment: p0nzovn
parent: t3_1vatgl4
author: s1ammage
created_utc: 1785417692
edited: 1785418501
body:
The only thing I can think of is I got coldcards from the site in January and entered my seed into the coldcard. Set up the wallet to test my phrase and setup watch only.

I was worried I didn’t write down my seed phrase right, so I bought a coldcard to test it. Never hooked it up into a computer. Just the SD card.

comment: p0nzwz2
parent: t1_p0nzovn
author: Acceptable-Leek1546
created_utc: 1785417756
edited: false
body:
I would assume this is what caused it to be drained. Never enter seed phrase anywhere. 

comment: p0o03cx
parent: t3_1vatgl4
author: Play-Resident
created_utc: 1785417808
edited: false
body:
someone will have a great summer holiday now

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  14. Earliest copy held
    seen · Captured here 124,152 chars
    Extracted text as captured 
    post: 1vatgl4
author: s1ammage
created_utc: 1785417575
title: Full panic - one of my wallets was drained
body:
I haven’t done anything since creation except sending into the wallet. 

comment: p0nzoe2
parent: t3_1vatgl4
author: [deleted]
created_utc: 1785417688
edited: 1785843572
body:
[removed]

comment: p0nzovn
parent: t3_1vatgl4
author: s1ammage
created_utc: 1785417692
edited: 1785418501
body:
The only thing I can think of is I got coldcards from the site in January and entered my seed into the coldcard. Set up the wallet to test my phrase and setup watch only.

I was worried I didn’t write down my seed phrase right, so I bought a coldcard to test it. Never hooked it up into a computer. Just the SD card.

comment: p0nzwz2
parent: t1_p0nzovn
author: Acceptable-Leek1546
created_utc: 1785417756
edited: false
body:
I would assume this is what caused it to be drained. Never enter seed phrase anywhere. 

comment: p0o03cx
parent: t3_1vatgl4
author: Play-Resident
created_utc: 1785417808
edited: false
body:
someone will have a great summer holiday now

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

How to check this yourself

The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.

Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.