COLDCARD RNG incident the public record, collected and explained
Informational only, and this site never asks for your seed words. details

Informational only. This is an open source collection of what others have published about the incident, together with an explanation of it. It is not financial, security or legal advice, and not a substitute for professional advice about your own situation. It is not affiliated with, endorsed by, or speaking for Coinkite. Material is attributed and quoted as published; where sources disagree their scenarios are kept separate with their assumptions rather than reconciled into one answer. Everything is meant to be checked against the linked evidence rather than taken on trust. Act on your own judgement about a particular situation. Editorial standards and corrections.

Do not disclose recovery material to a website, form, message or support account. This site never asks for it, and contributions containing recovery words or private keys are not accepted.

r/Bitcoin: appeal to drained owners not to do anything drastic

reddit-victim-support-psa

https://www.reddit.com/r/Bitcoin/comments/1vdxmk0/psa_to_anyone_who_got_their_coldcard_wallet/

Latest reviewed change

source content difference between and

A commenter account was deleted, replacing one comment with [deleted], and an earlier class-action comment was removed.

seen +2 -10 full history below 
 
 comment: p1ft6dj
 parent: t1_p1dfvss
-author: Expert-Evening9303
+author: [deleted]
 created_utc: 1785761794
 edited: false
 body:

First lines only. The complete diff is in the timeline below.

Organisation
reddit
Evidence role
Community discussion
Published
not established
Source changes
3
Detected differences
3
Unreviewed
0
Copies held
4

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked .

  1. source content difference between and Current source content +2 -10

    A commenter account was deleted, replacing one comment with [deleted], and an earlier class-action comment was removed.

    seen · Captured here 10,979 chars
    What changed from the previous capture 12 lines 
     
 comment: p1ft6dj
 parent: t1_p1dfvss
-author: Expert-Evening9303
+author: [deleted]
 created_utc: 1785761794
 edited: false
 body:
-I think they mean the physical wallet itself, not the compromised seed. Simply owning a coldcard might be enough to get in on the class action.
+[deleted]
 
 comment: p1fu9wi
 parent: t1_p1ft6dj
 body:
 I doubt that. I can buy one on eBay and load it with a compromised wallet seed... Wallet seed used to be proof of ownership but now that coldcard has screwed everyone through their own pride and ego, that no longer holds true.
 
-comment: p1fv1a6
-parent: t1_p1fu9wi
-author: Expert-Evening9303
-created_utc: 1785762375
-edited: false
-body:
-I suspect that if a class action goes through, they'll just allow anyone who bought a coldcard within some time frame to join. In the end it doesn't matter much, you'll end up getting like $20 ten years later. Nobody's getting their actual funds back because, like you said, the compromised wallets can be claimed by anyone.
-
 comment: p1gj6kk
 parent: t3_1vdxmk0
 author: petateom
    Extracted text as captured 
    post: 1vdxmk0
author: Interesting_Drag143
created_utc: 1785715143
title: PSA: to anyone who got their ColdCard wallet hacked, please, don’t do anything stupid.
body:
I mean it. Reach out to friends, family, anyone you trust. Do NOT destroy your ColdCard. If funds are recoverable at some point, you may need the original device they were stored on. 

If you are isolated, feel like something could go wrong or else, please please please reach out to someone. [https://findahelpline.com](https://findahelpline.com)

Don’t keep things to yourself. You’re gonna need to talk about it. Time always does its thing. And yes, you can believe that the Bitcoin community is going to be ferocious on this one. If you have the courage to do so, you can always take a look at X. But you don’t have to. What matters most is you.

Take care of yourself people.

comment: p1cpbuq
parent: t3_1vdxmk0
author: Aggravating-Owl-7050
created_utc: 1785715260
edited: false
body:
thank you! I think many people did not thought about that. Thank you for doing it!

comment: p1cpz35
parent: t3_1vdxmk0
author: SubstantialNinja
created_utc: 1785715474
edited: false
body:
the coins won't be sent back to compromised addresses. 

comment: p1cqge8
parent: t1_p1cpz35
author: Interesting_Drag143
created_utc: 1785715630
edited: false
body:
That we don’t know. Many trusted users on X have publicly advised to not destroy the devices.

comment: p1cqvyf
parent: t1_p1cqge8
author: SubstantialNinja

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  2. source content difference between and source content +24 -0

    The Reddit thread gained 3 new comments.

    seen · Captured here 11,555 chars
    What changed from the previous capture 24 lines 
     edited: false
 body:
 these coins are gone for good, im sorry :/
+
+comment: p1p7eb7
+parent: t1_p1cxoqo
+author: george420
+created_utc: 1785867730
+edited: false
+body:
+I was part of the hack. Still reeling right now. I'd like to think that I could demonstrate it's was my bitcoin that was stolen because I have all transactions IDs that show the centralized exchange with KYC where I legally purchased them before moving them to the affected wallet. 
+
+comment: p1p7mhq
+parent: t1_p1dfvss
+author: george420
+created_utc: 1785867786
+edited: false
+body:
+I can show the bitcoin was purchased from the exchange legally with KYC and all transaction log. Things hacker cannot do.
+
+comment: p1pb67i
+parent: t1_p1p7mhq
+author: comp21
+created_utc: 1785868671
+edited: false
+body:
+Yes that's the only way you could prove a loss...
    Extracted text as captured 
    post: 1vdxmk0
author: Interesting_Drag143
created_utc: 1785715143
title: PSA: to anyone who got their ColdCard wallet hacked, please, don’t do anything stupid.
body:
I mean it. Reach out to friends, family, anyone you trust. Do NOT destroy your ColdCard. If funds are recoverable at some point, you may need the original device they were stored on. 

If you are isolated, feel like something could go wrong or else, please please please reach out to someone. [https://findahelpline.com](https://findahelpline.com)

Don’t keep things to yourself. You’re gonna need to talk about it. Time always does its thing. And yes, you can believe that the Bitcoin community is going to be ferocious on this one. If you have the courage to do so, you can always take a look at X. But you don’t have to. What matters most is you.

Take care of yourself people.

comment: p1cpbuq
parent: t3_1vdxmk0
author: Aggravating-Owl-7050
created_utc: 1785715260
edited: false
body:
thank you! I think many people did not thought about that. Thank you for doing it!

comment: p1cpz35
parent: t3_1vdxmk0
author: SubstantialNinja
created_utc: 1785715474
edited: false
body:
the coins won't be sent back to compromised addresses. 

comment: p1cqge8
parent: t1_p1cpz35
author: Interesting_Drag143
created_utc: 1785715630
edited: false
body:
That we don’t know. Many trusted users on X have publicly advised to not destroy the devices.

comment: p1cqvyf
parent: t1_p1cqge8
author: SubstantialNinja

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  3. source content difference between and source content +8 -0

    1 new Reddit comment was posted, including LanguageStudyBuddy.

    seen · Captured here 10,805 chars
    What changed from the previous capture 8 lines 
     edited: false
 body:
 Not prove that “its theirs” but prove that they have sent bitcoin to one of the adresses that later gets hacked. That might be enough. Perhaps in combination with some proof that they bought a Coldcard before the transaction date. 
+
+comment: p1ma21j
+parent: t3_1vdxmk0
+author: LanguageStudyBuddy
+created_utc: 1785836678
+edited: false
+body:
+these coins are gone for good, im sorry :/
    Extracted text as captured 
    post: 1vdxmk0
author: Interesting_Drag143
created_utc: 1785715143
title: PSA: to anyone who got their ColdCard wallet hacked, please, don’t do anything stupid.
body:
I mean it. Reach out to friends, family, anyone you trust. Do NOT destroy your ColdCard. If funds are recoverable at some point, you may need the original device they were stored on. 

If you are isolated, feel like something could go wrong or else, please please please reach out to someone. [https://findahelpline.com](https://findahelpline.com)

Don’t keep things to yourself. You’re gonna need to talk about it. Time always does its thing. And yes, you can believe that the Bitcoin community is going to be ferocious on this one. If you have the courage to do so, you can always take a look at X. But you don’t have to. What matters most is you.

Take care of yourself people.

comment: p1cpbuq
parent: t3_1vdxmk0
author: Aggravating-Owl-7050
created_utc: 1785715260
edited: false
body:
thank you! I think many people did not thought about that. Thank you for doing it!

comment: p1cpz35
parent: t3_1vdxmk0
author: SubstantialNinja
created_utc: 1785715474
edited: false
body:
the coins won't be sent back to compromised addresses. 

comment: p1cqge8
parent: t1_p1cpz35
author: Interesting_Drag143
created_utc: 1785715630
edited: false
body:
That we don’t know. Many trusted users on X have publicly advised to not destroy the devices.

comment: p1cqvyf
parent: t1_p1cqge8
author: SubstantialNinja

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  4. Earliest copy held
    seen · Captured here 10,654 chars
    Extracted text as captured 
    post: 1vdxmk0
author: Interesting_Drag143
created_utc: 1785715143
title: PSA: to anyone who got their ColdCard wallet hacked, please, don’t do anything stupid.
body:
I mean it. Reach out to friends, family, anyone you trust. Do NOT destroy your ColdCard. If funds are recoverable at some point, you may need the original device they were stored on. 

If you are isolated, feel like something could go wrong or else, please please please reach out to someone. [https://findahelpline.com](https://findahelpline.com)

Don’t keep things to yourself. You’re gonna need to talk about it. Time always does its thing. And yes, you can believe that the Bitcoin community is going to be ferocious on this one. If you have the courage to do so, you can always take a look at X. But you don’t have to. What matters most is you.

Take care of yourself people.

comment: p1cpbuq
parent: t3_1vdxmk0
author: Aggravating-Owl-7050
created_utc: 1785715260
edited: false
body:
thank you! I think many people did not thought about that. Thank you for doing it!

comment: p1cpz35
parent: t3_1vdxmk0
author: SubstantialNinja
created_utc: 1785715474
edited: false
body:
the coins won't be sent back to compromised addresses. 

comment: p1cqge8
parent: t1_p1cpz35
author: Interesting_Drag143
created_utc: 1785715630
edited: false
body:
That we don’t know. Many trusted users on X have publicly advised to not destroy the devices.

comment: p1cqvyf
parent: t1_p1cqge8
author: SubstantialNinja

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

How to check this yourself

The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.

Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.