r/coldcard: where to move bitcoin after the exploit
reddit-where-to-transfer
https://www.reddit.com/r/coldcard/comments/1vbmuet/now_that_coldcard_is_exploitable_where_to/
Latest reviewed change
source content difference between and
Two comments by DonTheHolder were removed: one advising moving to a CEX or ETF now shows [removed] with author [deleted], and a one-word reply ("Lies.") was deleted.
comment: p10q77q
parent: t3_1vbmuet
-author: DonTheHolder
+author: [deleted]
created_utc: 1785563240
edited: false
body:
First lines only. The complete diff is in the timeline below.
- Organisation
- Evidence role
- Community discussion
- Published
- not established
- Source changes
- 1
- Detected differences
- 1
- Unreviewed
- 0
- Copies held
- 2
Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked .
This post is held twice: here, with this project's own note on why it matters, and again as part of the conversation captured at , which is polled for changes. Both copies are the same post; neither is a separate event.
Snapshot and diff bodies for this chain monitor are held in the local evidence archive but withheld from the public site because they can contain the addresses of people who published nothing themselves. Capture times and reviewed change summaries remain available below.
Held captures
-
Two comments by DonTheHolder were removed: one advising moving to a CEX or ETF now shows [removed] with author [deleted], and a one-word reply ("Lies.") was deleted.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 18 lines
comment: p10q77q parent: t3_1vbmuet -author: DonTheHolder +author: [deleted] created_utc: 1785563240 edited: false body: -No migration. Get off the hardware wallets and mitigate the issue by going to the CEX such as Coinbase, ETF stock, etc. - -You're going to pay taxes regardless, unless you're in another country that has none or low taxes. - -Safer for you, your family, and being wrenched 馃敡 - -Not to mention there is a beneficiary path versus some posted note that your wife finds before she divorces you and has a boating accident. +[removed] comment: p10r3i8 parent: t3_1vbmuet edited: false body: Yeah I don't know how they're going to get out of this one. And there's no way to contact them for refunds... - -comment: p1cv2hp -parent: t1_p16n8mb -author: DonTheHolder -created_utc: 1785717152 -edited: false -body: -Lies.Extracted text as captured
post: 1vbmuet author: urosino created_utc: 1785492851 title: Now that Coldcard is exploitable, where to transfer bitcoin? comment: p0y3psb parent: t3_1vbmuet author: ironmoosen created_utc: 1785530109 edited: false body: To be clear, the coldcard as a signer isn鈥檛 compromised. Just its seed generator. You could just generate a new seed elsewhere and import that to the coldcard and continue using it risk free. Remember, these hardware wallets are all essentially performing two different services: seed generation and transaction signing. The seed creation is the part that failed in this case. Having said that, it seems all hardware wallets leave some things to be desired and demand some level of trust in the company that makes them. Sad that coldcard lost our trust. Personally I鈥檓 using Ledger but I鈥檓 just trusting a similar problem doesn鈥檛 arise with them. comment: p0y45mc parent: t1_p0y3psb author: tpc0121 created_utc: 1785530230 edited: false body: there is no way coldcard survives this, long term. meaning, it's likely that support for their devices will end sooner than later. if i were you, i'd just look to migrate to another hardware solution asap. comment: p0ys4xz parent: t1_p0y45mc author: JumpProfessional3372 created_utc: 1785537241 edited: false body: but is it really important to have latest firmware in an air gaped wallet? I feel like every firmware update is a risk. comment: p10q77q parent: t3_1vbmuet author: [deleted] created_utc: 1785563240 edited: false body: [removed]Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 0 lines
Extracted text as captured
post: 1vbmuet author: urosino created_utc: 1785492851 title: Now that Coldcard is exploitable, where to transfer bitcoin? comment: p0y3psb parent: t3_1vbmuet author: ironmoosen created_utc: 1785530109 edited: false body: To be clear, the coldcard as a signer isn鈥檛 compromised. Just its seed generator. You could just generate a new seed elsewhere and import that to the coldcard and continue using it risk free. Remember, these hardware wallets are all essentially performing two different services: seed generation and transaction signing. The seed creation is the part that failed in this case. Having said that, it seems all hardware wallets leave some things to be desired and demand some level of trust in the company that makes them. Sad that coldcard lost our trust. Personally I鈥檓 using Ledger but I鈥檓 just trusting a similar problem doesn鈥檛 arise with them. comment: p0y45mc parent: t1_p0y3psb author: tpc0121 created_utc: 1785530230 edited: false body: there is no way coldcard survives this, long term. meaning, it's likely that support for their devices will end sooner than later. if i were you, i'd just look to migrate to another hardware solution asap. comment: p0ys4xz parent: t1_p0y45mc author: JumpProfessional3372 created_utc: 1785537241 edited: false body: but is it really important to have latest firmware in an air gaped wallet? I feel like every firmware update is a risk. comment: p10q77q parent: t3_1vbmuet author: DonTheHolder created_utc: 1785563240 edited: false body: No migration. Get off the hardware wallets and mitigate the issue by going to the CEX such as Coinbase, ETF stock, etc.Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
0 presentation-noise differences. Sidebar, ticker and other page chrome churn that our review classified as not being changes to what the source says.
The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.
Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.
Compare the screenshot or a quotation against the original while it is available.