COLDCARD RNG incident the public record, collected and explained
Informational only, and this site never asks for your seed words. details

Informational only. This is an open source collection of what others have published about the incident, together with an explanation of it. It is not financial, security or legal advice, and not a substitute for professional advice about your own situation. It is not affiliated with, endorsed by, or speaking for Coinkite. Material is attributed and quoted as published; where sources disagree their scenarios are kept separate with their assumptions rather than reconciled into one answer. Everything is meant to be checked against the linked evidence rather than taken on trust. Act on your own judgement about a particular situation. Editorial standards and corrections.

Do not disclose recovery material to a website, form, message or support account. This site never asks for it, and contributions containing recovery words or private keys are not accepted.

r/coldcard: owner crediting the subreddit with saving their coins

reddit-saved-my-stack-thanks

https://www.reddit.com/r/coldcard/comments/1vdnbk3/big_ups_to_this_sub_you_all_saved_my_stack/

Latest reviewed change

source content difference between and

Reddit served 1 additional comment record(s); the diff preserves their text and any edits to existing records.

seen +8 -0 full history below 
 edited: false
 body:
 I would also like to thank the moderator on this subreddit who personally helped cancel my order on 2 additional cold cards before it shipped. With all they got going on I was sure after 2 days of processing they’d be sending it out and I’d be stuck with it. 
+
+comment: p21dn35
+parent: t3_1vdnbk3
+author: eternal_recurrence12
+created_utc: 1786014991

First lines only. The complete diff is in the timeline below.

Organisation
reddit
Evidence role
Community discussion
Published
not established
Source changes
2
Detected differences
2
Unreviewed
0
Copies held
3

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked .

  1. source content difference between and Current source content +8 -0

    Reddit served 1 additional comment record(s); the diff preserves their text and any edits to existing records.

    seen · Captured here 6,932 chars
    What changed from the previous capture 8 lines 
     edited: false
 body:
 I would also like to thank the moderator on this subreddit who personally helped cancel my order on 2 additional cold cards before it shipped. With all they got going on I was sure after 2 days of processing they’d be sending it out and I’d be stuck with it. 
+
+comment: p21dn35
+parent: t3_1vdnbk3
+author: eternal_recurrence12
+created_utc: 1786014991
+edited: false
+body:
+I still wouldn't trust moving my funds to the Coldcard just yet, regardless of whether it's a new firmware version, if the dice were rolled, or if a passphrase is used. New bugs could always surface, so I'd wait a bit longer. Honestly, even leaving them on Coinbase feels safer right now
    Extracted text as captured 
    post: 1vdnbk3
author: IronicHipsterCake
created_utc: 1785690083
title: Big ups to this sub, you all saved my stack.
body:
I would not have known about the vulnerability without seeing posts here. Thanks to all of you I've been able to move all funds to a safe location before I rebuild a new CC wallet. (Will actually go through the trouble of rolling dice this time).

I get people are upset with what's going on, for good reason. But the communication and information from this place was a huge positive. 

Thank all of you SO MUCH. 

comment: p1adrlz
parent: t3_1vdnbk3
author: Suspicious-Holiday42
created_utc: 1785691018
edited: false
body:
Are you the friend of the guy who said his friend is rushing back home from his vaccation to save his coins?  
Or are you the other guy who upset his wife by rolling dices at night so that she might divorce him

comment: p1aer36
parent: t1_p1adrlz
author: IronicHipsterCake
created_utc: 1785691281
edited: false
body:
Lol neither but I'm hoping they both get their stuff taken care of! 

In that situation would have left a vacation as well to address it ASAP. 

comment: p1agvco
parent: t3_1vdnbk3
author: Sammytheseaotter
created_utc: 1785691847
edited: false
body:
Dude! Stop using Coldcard with a rushed patch FFS!

comment: p1ainui
parent: t1_p1agvco

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  2. source content difference between and source content +8 -0

    The Reddit thread gained a thank-you from a participant who cancelled two pending COLDCARD orders.

    seen · Captured here 6,534 chars
    What changed from the previous capture 8 lines 
     edited: false
 body:
 I wonder if the attacker chose this week because so many people are on vacation
+
+comment: p1qsbng
+parent: t3_1vdnbk3
+author: AntZealousideal3728
+created_utc: 1785882970
+edited: false
+body:
+I would also like to thank the moderator on this subreddit who personally helped cancel my order on 2 additional cold cards before it shipped. With all they got going on I was sure after 2 days of processing they’d be sending it out and I’d be stuck with it.
    Extracted text as captured 
    post: 1vdnbk3
author: IronicHipsterCake
created_utc: 1785690083
title: Big ups to this sub, you all saved my stack.
body:
I would not have known about the vulnerability without seeing posts here. Thanks to all of you I've been able to move all funds to a safe location before I rebuild a new CC wallet. (Will actually go through the trouble of rolling dice this time).

I get people are upset with what's going on, for good reason. But the communication and information from this place was a huge positive. 

Thank all of you SO MUCH. 

comment: p1adrlz
parent: t3_1vdnbk3
author: Suspicious-Holiday42
created_utc: 1785691018
edited: false
body:
Are you the friend of the guy who said his friend is rushing back home from his vaccation to save his coins?  
Or are you the other guy who upset his wife by rolling dices at night so that she might divorce him

comment: p1aer36
parent: t1_p1adrlz
author: IronicHipsterCake
created_utc: 1785691281
edited: false
body:
Lol neither but I'm hoping they both get their stuff taken care of! 

In that situation would have left a vacation as well to address it ASAP. 

comment: p1agvco
parent: t3_1vdnbk3
author: Sammytheseaotter
created_utc: 1785691847
edited: false
body:
Dude! Stop using Coldcard with a rushed patch FFS!

comment: p1ainui
parent: t1_p1agvco

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  3. Earliest copy held
    seen · Captured here 6,165 chars
    Extracted text as captured 
    post: 1vdnbk3
author: IronicHipsterCake
created_utc: 1785690083
title: Big ups to this sub, you all saved my stack.
body:
I would not have known about the vulnerability without seeing posts here. Thanks to all of you I've been able to move all funds to a safe location before I rebuild a new CC wallet. (Will actually go through the trouble of rolling dice this time).

I get people are upset with what's going on, for good reason. But the communication and information from this place was a huge positive. 

Thank all of you SO MUCH. 

comment: p1adrlz
parent: t3_1vdnbk3
author: Suspicious-Holiday42
created_utc: 1785691018
edited: false
body:
Are you the friend of the guy who said his friend is rushing back home from his vaccation to save his coins?  
Or are you the other guy who upset his wife by rolling dices at night so that she might divorce him

comment: p1aer36
parent: t1_p1adrlz
author: IronicHipsterCake
created_utc: 1785691281
edited: false
body:
Lol neither but I'm hoping they both get their stuff taken care of! 

In that situation would have left a vacation as well to address it ASAP. 

comment: p1agvco
parent: t3_1vdnbk3
author: Sammytheseaotter
created_utc: 1785691847
edited: false
body:
Dude! Stop using Coldcard with a rushed patch FFS!

comment: p1ainui
parent: t1_p1agvco

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

How to check this yourself

The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.

Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.