COLDCARD RNG incident the public record, collected and explained
Informational only, and this site never asks for your seed words. details

Informational only. This is an open source collection of what others have published about the incident, together with an explanation of it. It is not financial, security or legal advice, and not a substitute for professional advice about your own situation. It is not affiliated with, endorsed by, or speaking for Coinkite. Material is attributed and quoted as published; where sources disagree their scenarios are kept separate with their assumptions rather than reconciled into one answer. Everything is meant to be checked against the linked evidence rather than taken on trust. Act on your own judgement about a particular situation. Editorial standards and corrections.

Do not disclose recovery material to a website, form, message or support account. This site never asks for it, and contributions containing recovery words or private keys are not accepted.

r/coldcard: where to move bitcoin after the exploit

reddit-where-to-transfer

https://www.reddit.com/r/coldcard/comments/1vbmuet/now_that_coldcard_is_exploitable_where_to/

Latest reviewed change

source content difference between and

Two comments by DonTheHolder were removed: one advising moving to a CEX or ETF now shows [removed] with author [deleted], and a one-word reply ("Lies.") was deleted.

seen +2 -16 full history below
 
 comment: p10q77q
 parent: t3_1vbmuet
-author: DonTheHolder
+author: [deleted]
 created_utc: 1785563240
 edited: false
 body:

First lines only. The complete diff is in the timeline below.

Organisation
reddit
Evidence role
Community discussion
Published
not established
Source changes
1
Detected differences
1
Unreviewed
0
Copies held
2

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked .

  1. source content difference between and Current source content +2 -16

    Two comments by DonTheHolder were removed: one advising moving to a CEX or ETF now shows [removed] with author [deleted], and a one-word reply ("Lies.") was deleted.

    seen · Captured here 2,733 chars
    What changed from the previous capture 18 lines
     
     comment: p10q77q
     parent: t3_1vbmuet
    -author: DonTheHolder
    +author: [deleted]
     created_utc: 1785563240
     edited: false
     body:
    -No migration. Get off the hardware wallets and mitigate the issue by going to the CEX such as Coinbase, ETF stock, etc. 
    -
    -You're going to pay taxes regardless, unless you're in another country that has none or low taxes.
    -
    -Safer for you, your family, and being wrenched 馃敡 
    -
    -Not to mention there is a beneficiary path versus some posted note that your wife finds before she divorces you and has a boating accident. 
    +[removed]
     
     comment: p10r3i8
     parent: t3_1vbmuet
     edited: false
     body:
     Yeah I don't know how they're going to get out of this one. And there's no way to contact them for refunds... 
    -
    -comment: p1cv2hp
    -parent: t1_p16n8mb
    -author: DonTheHolder
    -created_utc: 1785717152
    -edited: false
    -body:
    -Lies.
    
    Extracted text as captured
    post: 1vbmuet
    author: urosino
    created_utc: 1785492851
    title: Now that Coldcard is exploitable, where to transfer bitcoin?
    
    comment: p0y3psb
    parent: t3_1vbmuet
    author: ironmoosen
    created_utc: 1785530109
    edited: false
    body:
    To be clear, the coldcard as a signer isn鈥檛 compromised. Just its seed generator. You could just generate a new seed elsewhere and import that to the coldcard and continue using it risk free. Remember, these hardware wallets are all essentially performing two different services: seed generation and transaction signing. The seed creation is the part that failed in this case.
    
    Having said that, it seems all hardware wallets leave some things to be desired and demand some level of trust in the company that makes them. Sad that coldcard lost our trust. Personally I鈥檓 using Ledger but I鈥檓 just trusting a similar problem doesn鈥檛 arise with them. 
    
    comment: p0y45mc
    parent: t1_p0y3psb
    author: tpc0121
    created_utc: 1785530230
    edited: false
    body:
    there is no way coldcard survives this, long term. meaning, it's likely that support for their devices will end sooner than later.
    
    if i were you, i'd just look to migrate to another hardware solution asap. 
    
    comment: p0ys4xz
    parent: t1_p0y45mc
    author: JumpProfessional3372
    created_utc: 1785537241
    edited: false
    body:
    but is it really important to have latest firmware in an air gaped wallet? I feel like every firmware update is a risk.
    
    comment: p10q77q
    parent: t3_1vbmuet
    author: [deleted]
    created_utc: 1785563240
    edited: false
    body:
    [removed]

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  2. Earliest copy held
    seen · Captured here 3,249 chars
    Extracted text as captured
    post: 1vbmuet
    author: urosino
    created_utc: 1785492851
    title: Now that Coldcard is exploitable, where to transfer bitcoin?
    
    comment: p0y3psb
    parent: t3_1vbmuet
    author: ironmoosen
    created_utc: 1785530109
    edited: false
    body:
    To be clear, the coldcard as a signer isn鈥檛 compromised. Just its seed generator. You could just generate a new seed elsewhere and import that to the coldcard and continue using it risk free. Remember, these hardware wallets are all essentially performing two different services: seed generation and transaction signing. The seed creation is the part that failed in this case.
    
    Having said that, it seems all hardware wallets leave some things to be desired and demand some level of trust in the company that makes them. Sad that coldcard lost our trust. Personally I鈥檓 using Ledger but I鈥檓 just trusting a similar problem doesn鈥檛 arise with them. 
    
    comment: p0y45mc
    parent: t1_p0y3psb
    author: tpc0121
    created_utc: 1785530230
    edited: false
    body:
    there is no way coldcard survives this, long term. meaning, it's likely that support for their devices will end sooner than later.
    
    if i were you, i'd just look to migrate to another hardware solution asap. 
    
    comment: p0ys4xz
    parent: t1_p0y45mc
    author: JumpProfessional3372
    created_utc: 1785537241
    edited: false
    body:
    but is it really important to have latest firmware in an air gaped wallet? I feel like every firmware update is a risk.
    
    comment: p10q77q
    parent: t3_1vbmuet
    author: DonTheHolder
    created_utc: 1785563240
    edited: false
    body:
    No migration. Get off the hardware wallets and mitigate the issue by going to the CEX such as Coinbase, ETF stock, etc. 

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

How to check this yourself

The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.

Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.