COLDCARD RNG incident the public record, collected and explained
Informational only, and this site never asks for your seed words. details

Informational only. This is an open source collection of what others have published about the incident, together with an explanation of it. It is not financial, security or legal advice, and not a substitute for professional advice about your own situation. It is not affiliated with, endorsed by, or speaking for Coinkite. Material is attributed and quoted as published; where sources disagree their scenarios are kept separate with their assumptions rather than reconciled into one answer. Everything is meant to be checked against the linked evidence rather than taken on trust. Act on your own judgement about a particular situation. Editorial standards and corrections.

Do not disclose recovery material to a website, form, message or support account. This site never asks for it, and contributions containing recovery words or private keys are not accepted.

r/coldcard: mockery of COLDCARD pricing after the incident

reddit-price-mockery

https://www.reddit.com/r/coldcard/comments/1veguk8/these_should_be_on_sale_for_20_whos_gonna_buy/

Latest reviewed change

source content difference between and

Reddit served 2 additional comment record(s); the diff preserves their text and any edits to existing records.

seen +20 -0 full history below
 edited: false
 body:
 i can’t get over someone smart enough to be able to retire on bitcoin before it’s even reached its full potential not having the sensibility to move their bitcoin to cold storage sober…..i don’t mean that in a condescending way i’m just genuinely nonplussed. 
+
+comment: p21sbp4
+parent: t1_p20uif5
+author: ZICRON_ULTRA
+created_utc: 1786020031

First lines only. The complete diff is in the timeline below.

Organisation
reddit
Evidence role
Community discussion
Published
not established
Source changes
7
Detected differences
7
Unreviewed
0
Copies held
8

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked .

  1. source content difference between and Current source content +20 -0

    Reddit served 2 additional comment record(s); the diff preserves their text and any edits to existing records.

    seen · Captured here 9,005 chars
    What changed from the previous capture 20 lines
     edited: false
     body:
     i can’t get over someone smart enough to be able to retire on bitcoin before it’s even reached its full potential not having the sensibility to move their bitcoin to cold storage sober…..i don’t mean that in a condescending way i’m just genuinely nonplussed. 
    +
    +comment: p21sbp4
    +parent: t1_p20uif5
    +author: ZICRON_ULTRA
    +created_utc: 1786020031
    +edited: false
    +body:
    +You and me both. 
    +
    +I wasn't drunk or blitz, but I forgot to write down a couple of key things that I thought that I would remember months or years later that I clearly did not, hence my cautionary tale for the class. 
    +
    +Trust me, for about 24 hours, my wife was VERY not happy with me. 😔 
    +
    +comment: p22eod7
    +parent: t1_p21sbp4
    +author: tigercublondon
    +created_utc: 1786026339
    +edited: false
    +body:
    +please tell me it’s not gone forever?
    
    Extracted text as captured
    post: 1veguk8
    author: cilicia3k3
    created_utc: 1785771336
    title: These should be on sale for $20. Who’s gonna buy this for $250?
    
    comment: p1h4xy9
    parent: t3_1veguk8
    author: Either_Display_6624
    created_utc: 1785774703
    edited: false
    body:
    What’s the difference between Coinkite and any other company? They can all fuck you over.
    
    The whole point is that you shouldn't trust any company, period. Don't trust developers whether they can fix bugs or not, hide backdoors or sell data to governments
    
    What about we air-gap and roll seed entropy and don't give a shit about how good or bad the company is behind the wallet
    
    comment: p1h55w1
    parent: t1_p1h4xy9
    author: cilicia3k3
    created_utc: 1785774758
    edited: false
    body:
    lol? I’m not debating this hack. I’m asking for $20 deal lol
    
    comment: p1hal2o
    parent: t1_p1h55w1
    author: Either_Display_6624
    created_utc: 1785776103
    edited: false
    body:
    20$ probably doesnt even cover shipping fees bro what are you on...
    
    comment: p1hei0c
    parent: t3_1veguk8
    author: YWorkFT
    created_utc: 1785777059
    edited: false
    body:
    I'll buy at 50% I'm not using them to generate a seed

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  2. source content difference between and source content +16 -0

    Reddit served 2 additional comment record(s); the diff preserves their text and any edits to existing records.

    seen · Captured here 8,472 chars
    What changed from the previous capture 16 lines
     edited: false
     body:
     I wouldn't take em for free
    +
    +comment: p20tpdf
    +parent: t1_p1hei0c
    +author: tigercublondon
    +created_utc: 1786005912
    +edited: false
    +body:
    +what would you use them for?
    +
    +comment: p20uif5
    +parent: t1_p1nvv80
    +author: tigercublondon
    +created_utc: 1786006316
    +edited: false
    +body:
    +i can’t get over someone smart enough to be able to retire on bitcoin before it’s even reached its full potential not having the sensibility to move their bitcoin to cold storage sober…..i don’t mean that in a condescending way i’m just genuinely nonplussed. 
    
    Extracted text as captured
    post: 1veguk8
    author: cilicia3k3
    created_utc: 1785771336
    title: These should be on sale for $20. Who’s gonna buy this for $250?
    
    comment: p1h4xy9
    parent: t3_1veguk8
    author: Either_Display_6624
    created_utc: 1785774703
    edited: false
    body:
    What’s the difference between Coinkite and any other company? They can all fuck you over.
    
    The whole point is that you shouldn't trust any company, period. Don't trust developers whether they can fix bugs or not, hide backdoors or sell data to governments
    
    What about we air-gap and roll seed entropy and don't give a shit about how good or bad the company is behind the wallet
    
    comment: p1h55w1
    parent: t1_p1h4xy9
    author: cilicia3k3
    created_utc: 1785774758
    edited: false
    body:
    lol? I’m not debating this hack. I’m asking for $20 deal lol
    
    comment: p1hal2o
    parent: t1_p1h55w1
    author: Either_Display_6624
    created_utc: 1785776103
    edited: false
    body:
    20$ probably doesnt even cover shipping fees bro what are you on...
    
    comment: p1hei0c
    parent: t3_1veguk8
    author: YWorkFT
    created_utc: 1785777059
    edited: false
    body:
    I'll buy at 50% I'm not using them to generate a seed

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  3. source content difference between and source content +8 -0

    Reddit served 1 additional comment record(s); the diff preserves their text and any edits to existing records.

    seen · Captured here 7,975 chars
    What changed from the previous capture 8 lines
     edited: false
     body:
     Wow that’s crazy. Well try to see if you can get in, otherwise I’ll take it off your hand after you wipe it 😁🤞
    +
    +comment: p1y3rsv
    +parent: t3_1veguk8
    +author: Admirable_Tie3700
    +created_utc: 1785968430
    +edited: false
    +body:
    +I wouldn't take em for free
    
    Extracted text as captured
    post: 1veguk8
    author: cilicia3k3
    created_utc: 1785771336
    title: These should be on sale for $20. Who’s gonna buy this for $250?
    
    comment: p1h4xy9
    parent: t3_1veguk8
    author: Either_Display_6624
    created_utc: 1785774703
    edited: false
    body:
    What’s the difference between Coinkite and any other company? They can all fuck you over.
    
    The whole point is that you shouldn't trust any company, period. Don't trust developers whether they can fix bugs or not, hide backdoors or sell data to governments
    
    What about we air-gap and roll seed entropy and don't give a shit about how good or bad the company is behind the wallet
    
    comment: p1h55w1
    parent: t1_p1h4xy9
    author: cilicia3k3
    created_utc: 1785774758
    edited: false
    body:
    lol? I’m not debating this hack. I’m asking for $20 deal lol
    
    comment: p1hal2o
    parent: t1_p1h55w1
    author: Either_Display_6624
    created_utc: 1785776103
    edited: false
    body:
    20$ probably doesnt even cover shipping fees bro what are you on...
    
    comment: p1hei0c
    parent: t3_1veguk8
    author: YWorkFT
    created_utc: 1785777059
    edited: false
    body:
    I'll buy at 50% I'm not using them to generate a seed

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  4. source content difference between and source content +8 -0

    1 new Reddit reply was posted, by cilicia3k3, responding to the reported device-access problem.

    seen · Captured here 7,840 chars
    What changed from the previous capture 8 lines
     But it was a wakeup call that I need to do a better job this time. 
     
     But spider-man was good👍 
    +
    +comment: p1o1skw
    +parent: t1_p1nvv80
    +author: cilicia3k3
    +created_utc: 1785857353
    +edited: false
    +body:
    +Wow that’s crazy. Well try to see if you can get in, otherwise I’ll take it off your hand after you wipe it 😁🤞
    
    Extracted text as captured
    post: 1veguk8
    author: cilicia3k3
    created_utc: 1785771336
    title: These should be on sale for $20. Who’s gonna buy this for $250?
    
    comment: p1h4xy9
    parent: t3_1veguk8
    author: Either_Display_6624
    created_utc: 1785774703
    edited: false
    body:
    What’s the difference between Coinkite and any other company? They can all fuck you over.
    
    The whole point is that you shouldn't trust any company, period. Don't trust developers whether they can fix bugs or not, hide backdoors or sell data to governments
    
    What about we air-gap and roll seed entropy and don't give a shit about how good or bad the company is behind the wallet
    
    comment: p1h55w1
    parent: t1_p1h4xy9
    author: cilicia3k3
    created_utc: 1785774758
    edited: false
    body:
    lol? I’m not debating this hack. I’m asking for $20 deal lol
    
    comment: p1hal2o
    parent: t1_p1h55w1
    author: Either_Display_6624
    created_utc: 1785776103
    edited: false
    body:
    20$ probably doesnt even cover shipping fees bro what are you on...
    
    comment: p1hei0c
    parent: t3_1veguk8
    author: YWorkFT
    created_utc: 1785777059
    edited: false
    body:
    I'll buy at 50% I'm not using them to generate a seed

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  5. source content difference between and source content +50 -0

    1 new Reddit comment was posted, by ZICRON_ULTRA, describing difficulty moving funds after forgetting a device PIN and wallet-passphrase pairings.

    seen · Captured here 7,627 chars
    What changed from the previous capture 50 lines
     edited: false
     body:
     It'll make for a good diy project, rip out the internals and reuse the keyboard and screen. 
    +
    +comment: p1nvv80
    +parent: t1_p1n3azi
    +author: ZICRON_ULTRA
    +created_utc: 1785855800
    +edited: false
    +body:
    +No, it's actually perfect, I used it once to set up my air gapped cold storage and then put it in my safety deposit box in a city that's 30 minutes away from where I live. 
    +
    +Ironically, I had an appointment in that city Thursday morning, and I used to work at that bank, hence why my safe box was there, but because of bitcoin, I decided to retire at the end of 2025.
    +
    +I stopped in the bank after my appointment, chewed the fat with a few employees I knew and closed my safe box to move the contents closer. 
    +
    +I heard about the exploit on Friday, but saw that coldcard Qs were said to be safe, so didn't think much more about it, at that point I hadn't heard about the extent of the theft I guess.
    +
    +Sunday went to see Spider-Man in another city that's 1.5 hours away and at that point heard that Qs were vulnerable and the extent of the thefts. 
    +
    +I had 3 wallets, all different amounts of bitcoin, one I felt I could give up easily in a wrench attack with a passphrase that only my wife and I knew, because stupidly, pretty much everyone I knew, knows that I was retiring because of my bitcoin holdings.
    +
    +BIP 85 wallets, and the seed stamped into steel, I had a copy of the seed in the safe box and one at home with me, but the passphrases for each wallet were only in the heads of me and my wife. 
    +
    +I had watch only wallets set up on sparrow on my computer which I would look at from time to time just to see that the bitcoin was there, and Sunday morning, it was still there. 
    +
    +Got home Sunday evening and knew I had to move my bitcoin ASAP, I felt like the only reason it was all still there was because of my passphrases, but they were pretty short and simple, because I decided to memorize them instead of stamp then somewhere. 
    +
    +Here's my cautionary tale: don't set up your forever cold storage when you're a bit tipsy. 
    +
    +I forgot to write down the pin to access the coldcard Q. 
    +
    +I spent 6 hours Sunday night trying to access the coldcard, and then another 6 Monday morning trying to get the bitcoin moved because I also somehow managed to forget which passphrase went with which wallet, and I thought there might have been one on the parent wallet, so I had like 3x3x3=27 possible combinations of wallets and passphrases to try. 
    +
    +I finally got all my bitcoin safely moved to a software wallet and my Jade plus will be here tomorrow so I can set up cold storage again, this time sober and hopefully I'll do it correctly this time.
    +
    +As for the Q, I did set it to brick after 13 failed attempt to open it. 
    +
    +I have 9 left. 
    +
    +So if I get it opened, I'll check back in, but I'm not hopeful. 
    +
    +Honesty after 12 stressful hours of working and struggling to get my bitcoin moved, thinking at any second it would be stolen, going back and forth between trying to sweep the keys, and trying to unlock the coldcard Q, it kind of sickens me to look at it.
    +
    +I'll probably end up bricking it and tossing it in the bin, but I might get lucky; again, because I sure was with getting my bitcoin safe.
    +
    +So, everyone, I hope you do better at cold storage self custody than I did, and I hope I do better this time.
    +
    +So very sorry to everyone this happened to, my heart hurts for you all, because I don't know or even want to think about what would have happened to me and my family if my bitcoin had been stolen. It probably would have ended me, or us. 
    +
    +But it was a wakeup call that I need to do a better job this time. 
    +
    +But spider-man was good👍 
    
    Extracted text as captured
    post: 1veguk8
    author: cilicia3k3
    created_utc: 1785771336
    title: These should be on sale for $20. Who’s gonna buy this for $250?
    
    comment: p1h4xy9
    parent: t3_1veguk8
    author: Either_Display_6624
    created_utc: 1785774703
    edited: false
    body:
    What’s the difference between Coinkite and any other company? They can all fuck you over.
    
    The whole point is that you shouldn't trust any company, period. Don't trust developers whether they can fix bugs or not, hide backdoors or sell data to governments
    
    What about we air-gap and roll seed entropy and don't give a shit about how good or bad the company is behind the wallet
    
    comment: p1h55w1
    parent: t1_p1h4xy9
    author: cilicia3k3
    created_utc: 1785774758
    edited: false
    body:
    lol? I’m not debating this hack. I’m asking for $20 deal lol
    
    comment: p1hal2o
    parent: t1_p1h55w1
    author: Either_Display_6624
    created_utc: 1785776103
    edited: false
    body:
    20$ probably doesnt even cover shipping fees bro what are you on...
    
    comment: p1hei0c
    parent: t3_1veguk8
    author: YWorkFT
    created_utc: 1785777059
    edited: false
    body:
    I'll buy at 50% I'm not using them to generate a seed

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  6. source content difference between and source content +8 -0

    1 new Reddit comment was posted, by MysteriousAlpaco, suggesting reuse of device parts.

    seen · Captured here 4,085 chars
    What changed from the previous capture 8 lines
     edited: false
     body:
     Done. Any scratches ? 
    +
    +comment: p1np50s
    +parent: t3_1veguk8
    +author: MysteriousAlpaco
    +created_utc: 1785854031
    +edited: false
    +body:
    +It'll make for a good diy project, rip out the internals and reuse the keyboard and screen. 
    
    Extracted text as captured
    post: 1veguk8
    author: cilicia3k3
    created_utc: 1785771336
    title: These should be on sale for $20. Who’s gonna buy this for $250?
    
    comment: p1h4xy9
    parent: t3_1veguk8
    author: Either_Display_6624
    created_utc: 1785774703
    edited: false
    body:
    What’s the difference between Coinkite and any other company? They can all fuck you over.
    
    The whole point is that you shouldn't trust any company, period. Don't trust developers whether they can fix bugs or not, hide backdoors or sell data to governments
    
    What about we air-gap and roll seed entropy and don't give a shit about how good or bad the company is behind the wallet
    
    comment: p1h55w1
    parent: t1_p1h4xy9
    author: cilicia3k3
    created_utc: 1785774758
    edited: false
    body:
    lol? I’m not debating this hack. I’m asking for $20 deal lol
    
    comment: p1hal2o
    parent: t1_p1h55w1
    author: Either_Display_6624
    created_utc: 1785776103
    edited: false
    body:
    20$ probably doesnt even cover shipping fees bro what are you on...
    
    comment: p1hei0c
    parent: t3_1veguk8
    author: YWorkFT
    created_utc: 1785777059
    edited: false
    body:
    I'll buy at 50% I'm not using them to generate a seed

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  7. source content difference between and source content +8 -0

    1 new Reddit comment was posted, including cilicia3k3.

    seen · Captured here 3,886 chars
    What changed from the previous capture 8 lines
     I'll sell mine for $20.
     
     It's purple 😁 
    +
    +comment: p1n3azi
    +parent: t1_p1lv1h7
    +author: cilicia3k3
    +created_utc: 1785847869
    +edited: false
    +body:
    +Done. Any scratches ? 
    
    Extracted text as captured
    post: 1veguk8
    author: cilicia3k3
    created_utc: 1785771336
    title: These should be on sale for $20. Who’s gonna buy this for $250?
    
    comment: p1h4xy9
    parent: t3_1veguk8
    author: Either_Display_6624
    created_utc: 1785774703
    edited: false
    body:
    What’s the difference between Coinkite and any other company? They can all fuck you over.
    
    The whole point is that you shouldn't trust any company, period. Don't trust developers whether they can fix bugs or not, hide backdoors or sell data to governments
    
    What about we air-gap and roll seed entropy and don't give a shit about how good or bad the company is behind the wallet
    
    comment: p1h55w1
    parent: t1_p1h4xy9
    author: cilicia3k3
    created_utc: 1785774758
    edited: false
    body:
    lol? I’m not debating this hack. I’m asking for $20 deal lol
    
    comment: p1hal2o
    parent: t1_p1h55w1
    author: Either_Display_6624
    created_utc: 1785776103
    edited: false
    body:
    20$ probably doesnt even cover shipping fees bro what are you on...
    
    comment: p1hei0c
    parent: t3_1veguk8
    author: YWorkFT
    created_utc: 1785777059
    edited: false
    body:
    I'll buy at 50% I'm not using them to generate a seed

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  8. Earliest copy held
    seen · Captured here 3,763 chars
    Extracted text as captured
    post: 1veguk8
    author: cilicia3k3
    created_utc: 1785771336
    title: These should be on sale for $20. Who’s gonna buy this for $250?
    
    comment: p1h4xy9
    parent: t3_1veguk8
    author: Either_Display_6624
    created_utc: 1785774703
    edited: false
    body:
    What’s the difference between Coinkite and any other company? They can all fuck you over.
    
    The whole point is that you shouldn't trust any company, period. Don't trust developers whether they can fix bugs or not, hide backdoors or sell data to governments
    
    What about we air-gap and roll seed entropy and don't give a shit about how good or bad the company is behind the wallet
    
    comment: p1h55w1
    parent: t1_p1h4xy9
    author: cilicia3k3
    created_utc: 1785774758
    edited: false
    body:
    lol? I’m not debating this hack. I’m asking for $20 deal lol
    
    comment: p1hal2o
    parent: t1_p1h55w1
    author: Either_Display_6624
    created_utc: 1785776103
    edited: false
    body:
    20$ probably doesnt even cover shipping fees bro what are you on...
    
    comment: p1hei0c
    parent: t3_1veguk8
    author: YWorkFT
    created_utc: 1785777059
    edited: false
    body:
    I'll buy at 50% I'm not using them to generate a seed

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

How to check this yourself

The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.

Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.