So nobody at Coldcard even bothered to ask Claude if it could find any vulnerabilities? lmao
>>62553385now that the internet is full with this shit, it just fund it in 8 mins only? GOOD LIL AI!
>>62553385path B is only reachable if the firmware was built with a certain flag. it raises the question of why this configuration was possible at all (and the company should definitely be held liable) but a cursory audit would reveal the correct presence of path A.
>>62553385pretty sure they are going to get sued into oblivion
>>62553385Cold Card is far from cleared of being a deep state attack.This bug sat for 5 years and was revealed right when big bitcoin is trying to get you to centralize all your coins on an exchange.The best way to fight off the attempted Big Bitcoin take over is to run bip-110.>>62508806
>>62553475What a joke, glownigger cucksplaining nonsense lmaoAll crypto cuck coins are a scam
>>62553563shut up you brain dead cunt
All these online AI shills defense force better be getting paid for all their handwaving. It’ll make hunting them worthwhile
>>62553385Supposedly the American frontier models are nerfed and would dance around the issue while kimi one shotted it. The first round of wallet drains looked very amateurish. So basically a vibecoder found this. Now the real pros are attacking the exploit.
>>62553569Lol homoshlomo seething
>>62553475> I can't get rid of this error> lemme disable the very reason to use a hardware wallet to fix this bugwhy do these fucking people have jobs
>>62553586Yeah, the big boys started bruteforcing passphrases as well now
>>62553685Homoshlomo needs it more than you, for his war or something
>>62553685In the beginning, people were getting partial drained. Definitely crazy that someone without much experience figured this out.
>>62553685So seed phrases are just being cracked now via AI brute force? Is this what that image means
>>62553773Nah it means it's backdoored by design
>>62553685>cuckold sessionsCrypto in a nutshell
>>62553418Versions which were last updated before this whole thing blew open can still easily find it by simply asking it to find a vulnerability, lmao
>>62553773The Coldcard seed phrases were so easy to crack that searching for another word or two (passphrases) behind the initial seed phrase is negligible to people with a lot of compute
>>62553773no, basically there is a limited range of possible entropy, which has trivialized checking addresses. it won't be long before attackers check every possible address that can be generated by this broken system
>>62553452they shouldn't be held liable for anything it was just a mistake
Kek based coinkikes
>>62553845be grateful goyeem
>>6255338511 minute supercut of Bitcoin influencers big and small shilling Coldcardhttps://old.reddit.com/r/Bitcoin/comments/1vco15y/11_minute_supercut_of_bitcoin_influencers_big_and/
>>62553475I need to know the nationality and skin color of the dev who committed that code.
>>62553936Wow an 11 minute compilation. Too bad not a single ounce of work poured into editing that video will result in any refunds.
>>62553671DEI
>>62553938j e e teet
>>62553475>>62553671>>62553938it was on purpose. 10 years later you'll find him in the Bahamas
>>62553671saars you can't say that saar we are great programmers!!>>62553385this is pretty brutal for cyrtpo
>>62553671Kek, this is jeetware level thinking for sw dev
The lesson of this is that you are likely to lose all your bitcoin from some bullshit hacks every yeat than making long term profit in 10 years. Time to get a real job and invest something tangible cryptocucks
I don't quite understand the hack yet, but isn't it safer just to keep a lot of your crypto on normiebase or gemini at this point?
dubs and btc drops to below 40k because of this
>>62554322witnessed dump this shit
>>62554444checked
>>62554322>>62554444czeched
>>62554322DO NOT REDEEM THE BTC
>>62554322>>62554444Good heavens, just look at the time!
So how did the hackers get the public addresses of coldcard users? Even bruteforcing that would take too much time wouldnt it?
>>62553563>racismGo to>>>/pol/
>>62553475this sounds the typical modern SW development where you have a management that wants everything as cheap and fast as possible, hiring cheapest workers and the only requirement at the end of the day is that it works.
>>62554850What? Why would you need someones public address when you're bruteforcing seed phrases?
>>62554895Dont you need the public address? How do you target wallets otherwise? Just bruteforce until some wallet isnr empty? I thought they specifically targeted cold wallet adresses, not whole adress space
>>62554923Yea, they’re bruteforcing, but bruteforcing a relatively small search space defined by the weak PRNG and predictable input seeds
>>62554923The coldcard seeds for mk3 were created by something like 40 bits of entropy. The search space is 1 trillion, tiny even for a laptop to bruteforce. The attack just brute forces the shitty rng and checks if it matches a wallet in use.The reason why this even works and only targets coldcards is because the bruteforce follows the coldcard specific rng code.
>>62553385AI finds shit only when it knows where to look
>>62553385does this mean the end of open source?
>>62554997See >>62553806Literally all anyone had to do was say "ayy AI, find me a vulnerability in coldcards firmware" and it would have done it. Someone obviously having done exactly that is why the first wave of drains was amateurish
