COLDCARD RNG incident the public record, collected and explained
Informational only, and this site never asks for your seed words. details

Informational only. This is an open source collection of what others have published about the incident, together with an explanation of it. It is not financial, security or legal advice, and not a substitute for professional advice about your own situation. It is not affiliated with, endorsed by, or speaking for Coinkite. Material is attributed and quoted as published; where sources disagree their scenarios are kept separate with their assumptions rather than reconciled into one answer. Everything is meant to be checked against the linked evidence rather than taken on trust. Act on your own judgement about a particular situation. Editorial standards and corrections.

Do not disclose recovery material to a website, form, message or support account. This site never asks for it, and contributions containing recovery words or private keys are not accepted.

Cold Card Retirement Attack?

stackernews-retirement-attack-question

https://stacker.news/items/1540033

Latest reviewed change

source content difference between and

The GraphQL response reordered an existing comment and the discussion gained a new reply saying the historical material did not age well.

seen +14 -7 full history below
     "item": {
       "comments": {
         "comments": [
+          {
+            "createdAt": "2026-08-04T14:13:52.190Z",
+            "text": "Biggest argument against it is they should also be sophisticated enough to know there's no great way to wash those coins, might be the most toxic coins ever with customers all over the globe and therefore law enforcement risk anywhere you go. \n\nThe business destroyed and potential legal costs likely outweigh whatever small amounts that could be dripped out at a time. \n\nAround the time of that post he had a hair across his ass for Foundation, who had only recently pivoted from shitcoin scamming. Understandable. The persona fits someone who believed in what they were selling more than just marketing, but was ultimately just too busy huffing their own farts.",
+            "user": {
+              "name": "justin_shocknet"

First lines only. The complete diff is in the timeline below.

Organisation
Stacker News
Evidence role
Community discussion
Published
2026-08-04
Source changes
5
Detected differences
6
Unreviewed
0
Copies held
7

UncleJim21 asking whether the incident resembles the vendor's historical “retirement attack” concept. Documents post-incident scrutiny of earlier COLDCARD material, alongside coldcard-retirement-attack-claim and reddit-retirement-attack-resurfaced. Any implication of intent is speculation by the posters, not evidence, and is not endorsed here. Captured through the site's public GraphQL API: the rendered pages crash the capture tab, and the API answers POST from this host. The query fixes the captured surface to the item's title, text and two levels of comments, each with author and absolute timestamp.

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked .

  1. source content difference between and source content +14 -7

    The GraphQL response reordered an existing comment and the discussion gained a new reply saying the historical material did not age well.

    seen · Captured here 3,884 chars
    What changed from the previous capture 21 lines
         "item": {
           "comments": {
             "comments": [
    +          {
    +            "createdAt": "2026-08-04T14:13:52.190Z",
    +            "text": "Biggest argument against it is they should also be sophisticated enough to know there's no great way to wash those coins, might be the most toxic coins ever with customers all over the globe and therefore law enforcement risk anywhere you go. \n\nThe business destroyed and potential legal costs likely outweigh whatever small amounts that could be dripped out at a time. \n\nAround the time of that post he had a hair across his ass for Foundation, who had only recently pivoted from shitcoin scamming. Understandable. The persona fits someone who believed in what they were selling more than just marketing, but was ultimately just too busy huffing their own farts.",
    +            "user": {
    +              "name": "justin_shocknet"
    +            }
    +          },
               {
                 "createdAt": "2026-08-04T20:35:42.952Z",
                 "text": "Update: I am now on team Retirement Attack:\n\n![](https://m.stacker.news/150841)\n\n![](https://m.stacker.news/150842)\n@justin_shocknet",
                 }
               },
               {
    -            "createdAt": "2026-08-04T14:13:52.190Z",
    -            "text": "Biggest argument against it is they should also be sophisticated enough to know there's no great way to wash those coins, might be the most toxic coins ever with customers all over the globe and therefore law enforcement risk anywhere you go. \n\nThe business destroyed and potential legal costs likely outweigh whatever small amounts that could be dripped out at a time. \n\nAround the time of that post he had a hair across his ass for Foundation, who had only recently pivoted from shitcoin scamming. Understandable. The persona fits someone who believed in what they were selling more than just marketing, but was ultimately just too busy huffing their own farts.",
    -            "user": {
    -              "name": "justin_shocknet"
    -            }
    -          },
    -          {
                 "createdAt": "2026-08-04T14:15:11.446Z",
                 "text": "Adding their response, or lack thereof, to those reports from years ago does paint a pretty damning picture.",
                 "user": {
                   "name": "Undisciplined"
    +            }
    +          },
    +          {
    +            "createdAt": "2026-08-05T06:39:39.019Z",
    +            "text": "Yeah, that didn’t age well.",
    +            "user": {
    +              "name": "phaedrus"
                 }
               },
               {
    
    Extracted text as captured
    {
      "data": {
        "item": {
          "comments": {
            "comments": [
              {
                "createdAt": "2026-08-04T14:13:52.190Z",
                "text": "Biggest argument against it is they should also be sophisticated enough to know there's no great way to wash those coins, might be the most toxic coins ever with customers all over the globe and therefore law enforcement risk anywhere you go. \n\nThe business destroyed and potential legal costs likely outweigh whatever small amounts that could be dripped out at a time. \n\nAround the time of that post he had a hair across his ass for Foundation, who had only recently pivoted from shitcoin scamming. Understandable. The persona fits someone who believed in what they were selling more than just marketing, but was ultimately just too busy huffing their own farts.",
                "user": {
                  "name": "justin_shocknet"
                }
              },
              {
                "createdAt": "2026-08-04T20:35:42.952Z",
                "text": "Update: I am now on team Retirement Attack:\n\n![](https://m.stacker.news/150841)\n\n![](https://m.stacker.news/150842)\n@justin_shocknet",
                "user": {
                  "name": "UncleJim21"
                }
              },
              {
                "createdAt": "2026-08-04T14:15:11.446Z",
                "text": "Adding their response, or lack thereof, to those reports from years ago does paint a pretty damning picture.",
                "user": {
                  "name": "Undisciplined"
                }
              },
              {
                "createdAt": "2026-08-05T06:39:39.019Z",
                "text": "Yeah, that didn’t age well.",
                "user": {
                  "name": "phaedrus"
                }
              },
              {
                "createdAt": "2026-08-05T00:20:33.193Z",
                "text": "I lean into a joke which didn't end well.\nAlso people are angry and want a scapegoat. Combine the two you get this.\n\nI was happy at first when I saw the coldcard bug because I wouldn't hear about nvk in the near future. But now when I see the scale of the disaster I would not like to be in his shoes, psychologically it must be tough.",
                "user": {
                  "name": "john_doe"
                }
              },

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  2. source content difference between and source content +14 -7

    The Stacker News thread gained a new comment saying the scale of the disaster made its author sympathize with NVK psychologically.

    seen · Captured here 3,686 chars
    What changed from the previous capture 21 lines
         "item": {
           "comments": {
             "comments": [
    +          {
    +            "createdAt": "2026-08-04T20:35:42.952Z",
    +            "text": "Update: I am now on team Retirement Attack:\n\n![](https://m.stacker.news/150841)\n\n![](https://m.stacker.news/150842)\n@justin_shocknet",
    +            "user": {
    +              "name": "UncleJim21"
    +            }
    +          },
               {
                 "createdAt": "2026-08-04T14:13:52.190Z",
                 "text": "Biggest argument against it is they should also be sophisticated enough to know there's no great way to wash those coins, might be the most toxic coins ever with customers all over the globe and therefore law enforcement risk anywhere you go. \n\nThe business destroyed and potential legal costs likely outweigh whatever small amounts that could be dripped out at a time. \n\nAround the time of that post he had a hair across his ass for Foundation, who had only recently pivoted from shitcoin scamming. Understandable. The persona fits someone who believed in what they were selling more than just marketing, but was ultimately just too busy huffing their own farts.",
                 }
               },
               {
    -            "createdAt": "2026-08-04T20:35:42.952Z",
    -            "text": "Update: I am now on team Retirement Attack:\n\n![](https://m.stacker.news/150841)\n\n![](https://m.stacker.news/150842)\n@justin_shocknet",
    -            "user": {
    -              "name": "UncleJim21"
    -            }
    -          },
    -          {
                 "createdAt": "2026-08-04T14:15:11.446Z",
                 "text": "Adding their response, or lack thereof, to those reports from years ago does paint a pretty damning picture.",
                 "user": {
                   "name": "Undisciplined"
    +            }
    +          },
    +          {
    +            "createdAt": "2026-08-05T00:20:33.193Z",
    +            "text": "I lean into a joke which didn't end well.\nAlso people are angry and want a scapegoat. Combine the two you get this.\n\nI was happy at first when I saw the coldcard bug because I wouldn't hear about nvk in the near future. But now when I see the scale of the disaster I would not like to be in his shoes, psychologically it must be tough.",
    +            "user": {
    +              "name": "john_doe"
                 }
               },
               {
    
    Extracted text as captured
    {
      "data": {
        "item": {
          "comments": {
            "comments": [
              {
                "createdAt": "2026-08-04T20:35:42.952Z",
                "text": "Update: I am now on team Retirement Attack:\n\n![](https://m.stacker.news/150841)\n\n![](https://m.stacker.news/150842)\n@justin_shocknet",
                "user": {
                  "name": "UncleJim21"
                }
              },
              {
                "createdAt": "2026-08-04T14:13:52.190Z",
                "text": "Biggest argument against it is they should also be sophisticated enough to know there's no great way to wash those coins, might be the most toxic coins ever with customers all over the globe and therefore law enforcement risk anywhere you go. \n\nThe business destroyed and potential legal costs likely outweigh whatever small amounts that could be dripped out at a time. \n\nAround the time of that post he had a hair across his ass for Foundation, who had only recently pivoted from shitcoin scamming. Understandable. The persona fits someone who believed in what they were selling more than just marketing, but was ultimately just too busy huffing their own farts.",
                "user": {
                  "name": "justin_shocknet"
                }
              },
              {
                "createdAt": "2026-08-04T14:15:11.446Z",
                "text": "Adding their response, or lack thereof, to those reports from years ago does paint a pretty damning picture.",
                "user": {
                  "name": "Undisciplined"
                }
              },
              {
                "createdAt": "2026-08-05T00:20:33.193Z",
                "text": "I lean into a joke which didn't end well.\nAlso people are angry and want a scapegoat. Combine the two you get this.\n\nI was happy at first when I saw the coldcard bug because I wouldn't hear about nvk in the near future. But now when I see the scale of the disaster I would not like to be in his shoes, psychologically it must be tough.",
                "user": {
                  "name": "john_doe"
                }
              },
              {
                "createdAt": "2026-08-04T23:29:21.360Z",
                "text": "The coins were not mixed and tumbled like the usual suspect hacker operations do, but consolidated onchain, so my guess would be strategic Bitcoin reserve.",
                "user": {
                  "name": "teemupleb"
                }
              },

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  3. source content difference between and source content +7 -0

    The Stacker News thread gained a reply speculating about the on-chain consolidation pattern.

    seen · Captured here 3,177 chars
    What changed from the previous capture 7 lines
                 }
               },
               {
    +            "createdAt": "2026-08-04T23:29:21.360Z",
    +            "text": "The coins were not mixed and tumbled like the usual suspect hacker operations do, but consolidated onchain, so my guess would be strategic Bitcoin reserve.",
    +            "user": {
    +              "name": "teemupleb"
    +            }
    +          },
    +          {
                 "createdAt": "2026-08-04T19:01:34.183Z",
                 "text": "Inside job is what I have been thinking too.",
                 "user": {
    
    Extracted text as captured
    {
      "data": {
        "item": {
          "comments": {
            "comments": [
              {
                "createdAt": "2026-08-04T14:13:52.190Z",
                "text": "Biggest argument against it is they should also be sophisticated enough to know there's no great way to wash those coins, might be the most toxic coins ever with customers all over the globe and therefore law enforcement risk anywhere you go. \n\nThe business destroyed and potential legal costs likely outweigh whatever small amounts that could be dripped out at a time. \n\nAround the time of that post he had a hair across his ass for Foundation, who had only recently pivoted from shitcoin scamming. Understandable. The persona fits someone who believed in what they were selling more than just marketing, but was ultimately just too busy huffing their own farts.",
                "user": {
                  "name": "justin_shocknet"
                }
              },
              {
                "createdAt": "2026-08-04T20:35:42.952Z",
                "text": "Update: I am now on team Retirement Attack:\n\n![](https://m.stacker.news/150841)\n\n![](https://m.stacker.news/150842)\n@justin_shocknet",
                "user": {
                  "name": "UncleJim21"
                }
              },
              {
                "createdAt": "2026-08-04T14:15:11.446Z",
                "text": "Adding their response, or lack thereof, to those reports from years ago does paint a pretty damning picture.",
                "user": {
                  "name": "Undisciplined"
                }
              },
              {
                "createdAt": "2026-08-04T23:29:21.360Z",
                "text": "The coins were not mixed and tumbled like the usual suspect hacker operations do, but consolidated onchain, so my guess would be strategic Bitcoin reserve.",
                "user": {
                  "name": "teemupleb"
                }
              },
              {
                "createdAt": "2026-08-04T19:01:34.183Z",
                "text": "Inside job is what I have been thinking too.",
                "user": {
                  "name": "chaoticalHeavy"
                }
              },

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  4. source content difference between and source content +7 -0

    The Stacker News thread gained a new comment saying its author now supports the retirement-attack theory.

    seen · Captured here 2,850 chars
    What changed from the previous capture 7 lines
                 "text": "Biggest argument against it is they should also be sophisticated enough to know there's no great way to wash those coins, might be the most toxic coins ever with customers all over the globe and therefore law enforcement risk anywhere you go. \n\nThe business destroyed and potential legal costs likely outweigh whatever small amounts that could be dripped out at a time. \n\nAround the time of that post he had a hair across his ass for Foundation, who had only recently pivoted from shitcoin scamming. Understandable. The persona fits someone who believed in what they were selling more than just marketing, but was ultimately just too busy huffing their own farts.",
                 "user": {
                   "name": "justin_shocknet"
    +            }
    +          },
    +          {
    +            "createdAt": "2026-08-04T20:35:42.952Z",
    +            "text": "Update: I am now on team Retirement Attack:\n\n![](https://m.stacker.news/150841)\n\n![](https://m.stacker.news/150842)\n@justin_shocknet",
    +            "user": {
    +              "name": "UncleJim21"
                 }
               },
               {
    
    Extracted text as captured
    {
      "data": {
        "item": {
          "comments": {
            "comments": [
              {
                "createdAt": "2026-08-04T14:13:52.190Z",
                "text": "Biggest argument against it is they should also be sophisticated enough to know there's no great way to wash those coins, might be the most toxic coins ever with customers all over the globe and therefore law enforcement risk anywhere you go. \n\nThe business destroyed and potential legal costs likely outweigh whatever small amounts that could be dripped out at a time. \n\nAround the time of that post he had a hair across his ass for Foundation, who had only recently pivoted from shitcoin scamming. Understandable. The persona fits someone who believed in what they were selling more than just marketing, but was ultimately just too busy huffing their own farts.",
                "user": {
                  "name": "justin_shocknet"
                }
              },
              {
                "createdAt": "2026-08-04T20:35:42.952Z",
                "text": "Update: I am now on team Retirement Attack:\n\n![](https://m.stacker.news/150841)\n\n![](https://m.stacker.news/150842)\n@justin_shocknet",
                "user": {
                  "name": "UncleJim21"
                }
              },
              {
                "createdAt": "2026-08-04T14:15:11.446Z",
                "text": "Adding their response, or lack thereof, to those reports from years ago does paint a pretty damning picture.",
                "user": {
                  "name": "Undisciplined"
                }
              },
              {
                "createdAt": "2026-08-04T19:01:34.183Z",
                "text": "Inside job is what I have been thinking too.",
                "user": {
                  "name": "chaoticalHeavy"
                }
              },
              {
                "createdAt": "2026-08-04T15:09:36.062Z",
                "text": "are you saying nvk is 18 yo?",
                "user": {
                  "name": "06bc1a977d"
                }
              }

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  5. source content difference between and source content +7 -0

    The Stacker News thread gained a new comment alleging an inside job.

    seen · Captured here 2,540 chars
    What changed from the previous capture 7 lines
                 }
               },
               {
    +            "createdAt": "2026-08-04T19:01:34.183Z",
    +            "text": "Inside job is what I have been thinking too.",
    +            "user": {
    +              "name": "chaoticalHeavy"
    +            }
    +          },
    +          {
                 "createdAt": "2026-08-04T15:09:36.062Z",
                 "text": "are you saying nvk is 18 yo?",
                 "user": {
    
    Extracted text as captured
    {
      "data": {
        "item": {
          "comments": {
            "comments": [
              {
                "createdAt": "2026-08-04T14:13:52.190Z",
                "text": "Biggest argument against it is they should also be sophisticated enough to know there's no great way to wash those coins, might be the most toxic coins ever with customers all over the globe and therefore law enforcement risk anywhere you go. \n\nThe business destroyed and potential legal costs likely outweigh whatever small amounts that could be dripped out at a time. \n\nAround the time of that post he had a hair across his ass for Foundation, who had only recently pivoted from shitcoin scamming. Understandable. The persona fits someone who believed in what they were selling more than just marketing, but was ultimately just too busy huffing their own farts.",
                "user": {
                  "name": "justin_shocknet"
                }
              },
              {
                "createdAt": "2026-08-04T14:15:11.446Z",
                "text": "Adding their response, or lack thereof, to those reports from years ago does paint a pretty damning picture.",
                "user": {
                  "name": "Undisciplined"
                }
              },
              {
                "createdAt": "2026-08-04T19:01:34.183Z",
                "text": "Inside job is what I have been thinking too.",
                "user": {
                  "name": "chaoticalHeavy"
                }
              },
              {
                "createdAt": "2026-08-04T15:09:36.062Z",
                "text": "are you saying nvk is 18 yo?",
                "user": {
                  "name": "06bc1a977d"
                }
              }
            ]
          },
          "createdAt": "2026-08-04T13:50:45.741Z",
          "text": "I want to know where the Stackers fall on conspiracy vs incompetence. I could completely see something like a Retirement Attack happening. I could also just see a complete comedy of errors.\n\nMy running theory is that the maintainers *could* have had an \"Office Space\" style bug that gave them a little bonus. Others have pointed out that (there were reports of funds swept in 2022). Then some 18 year old gets a hold of Kimi K3 and blows this exploit wide open. \n![](https://m.stacker.news/150795)\n\n![](https://m.stacker.news/150796)\n\nNot totally sure where I fall yet but I am leaning more toward conspiracy than toward incompetence actually. It's just so obvious and it was there for FIVE years. Where do you fall?",
          "title": "Cold Card Retirement Attack?",
          "user": {
            "name": "UncleJim21"

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  6. Earliest copy held
    seen · Captured here 2,319 chars
    Extracted text as captured
    {
      "data": {
        "item": {
          "comments": {
            "comments": [
              {
                "createdAt": "2026-08-04T14:13:52.190Z",
                "text": "Biggest argument against it is they should also be sophisticated enough to know there's no great way to wash those coins, might be the most toxic coins ever with customers all over the globe and therefore law enforcement risk anywhere you go. \n\nThe business destroyed and potential legal costs likely outweigh whatever small amounts that could be dripped out at a time. \n\nAround the time of that post he had a hair across his ass for Foundation, who had only recently pivoted from shitcoin scamming. Understandable. The persona fits someone who believed in what they were selling more than just marketing, but was ultimately just too busy huffing their own farts.",
                "user": {
                  "name": "justin_shocknet"
                }
              },
              {
                "createdAt": "2026-08-04T14:15:11.446Z",
                "text": "Adding their response, or lack thereof, to those reports from years ago does paint a pretty damning picture.",
                "user": {
                  "name": "Undisciplined"
                }
              },
              {
                "createdAt": "2026-08-04T15:09:36.062Z",
                "text": "are you saying nvk is 18 yo?",
                "user": {
                  "name": "06bc1a977d"
                }
              }
            ]
          },
          "createdAt": "2026-08-04T13:50:45.741Z",
          "text": "I want to know where the Stackers fall on conspiracy vs incompetence. I could completely see something like a Retirement Attack happening. I could also just see a complete comedy of errors.\n\nMy running theory is that the maintainers *could* have had an \"Office Space\" style bug that gave them a little bonus. Others have pointed out that (there were reports of funds swept in 2022). Then some 18 year old gets a hold of Kimi K3 and blows this exploit wide open. \n![](https://m.stacker.news/150795)\n\n![](https://m.stacker.news/150796)\n\nNot totally sure where I fall yet but I am leaning more toward conspiracy than toward incompetence actually. It's just so obvious and it was there for FIVE years. Where do you fall?",
          "title": "Cold Card Retirement Attack?",
          "user": {
            "name": "UncleJim21"
          }
        }
      }
    }
1 presentation-noise difference. Sidebar, ticker and other page chrome churn that our review classified as not being a change to what the source says.
  • +7 -7 Comment ordering churn only: teemupleb's "strategic Bitcoin reserve" guess moved from a lower position to the top of the comment list with unchanged text.
How to check this yourself

The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.

Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.