RayRay

@countbitcoin Buy plane Tix and slipstream the sats

Imagine: having 5 Coldcards MultiSig MK3's jurisdictionally separated around the world RN Fucking Nightmare

@Scavacini777 Slipstream for now. But ai will be perpetually looking for this exploit. So it's important to get those comprised coins moved to a safe address.

Watch!

@VanityFair Threats from jail are my favorite

Andrew Tate's lawyer has a warning for the GOP: “If Trump doesn’t support him, and if the next people who are going to be running for office potentially are just like, yeah, down the river he goes, that young cohort of people will break with the Republican Party in the next election" vanityfair.visitlink.me/EK0c9w

@BraddrofliT Of all the people in the world who this should happen to, it's Mitch McConnell.

@BraddrofliT Just announce an election and make them roll his weekend at Bernie's ass out. This isn't hard.

If it is true that Mitch McConnell died before the “proof of life” photo was released on July 12, as Kentucky Gov. Andy Beshear claims, this is a SERIOUS crime and those responsible MUST be prosecuted and put behind bars under the maximum sentence.

@Self_Sovereign_ @JoeyTweeets There will be wallets still standing after this AI wave passes, and everything will be "mythos tested" marketed or whatever. Antifragile meme persists. I think.

@JoeyTweeets A couple of months ago everybody panicked over quantum being able to break bitcoin in a matter of years Little did they know AI was going to do it in a matter of months. It might actually be over.

What the fuck

@bitcoinguideapp @bitcoinsbanker @PPQdotAI @Coinkite @OPENDIME @SeedSigner @Bitkey @bluewalletio @PhoenixWallet @SparrowWallet No secure element, so if a bad actor got physical control of the hardware, seed can be extracted. In like 15 minutes. The later models have secure elements, so they get green. Seeds generated by early wallets still safe besides caveat above.

@bitcoinsbanker @PPQdotAI @Coinkite @OPENDIME @SeedSigner @Bitkey @bluewalletio @PhoenixWallet @SparrowWallet Trezor model 1 & model T high risk 🔴 ????

Thanks to a generous credit of tokens from @PPQdotAI , Kimi K3 and an ape with a laptop (me) have conducted the following analysis of a bunch of projects / companies wallet softwares. @Coinkite , @OPENDIME , @SeedSigner , @Bitkey , @bluewalletio , @PhoenixWallet , @SparrowWallet , @Trezor , @Blockstream , @Ledger , @BitBoxSwiss , @SpecterDIY , @ElectrumWallet , @SamouraiWallet 🟡 Yellow ≠ broken. None of the nine Yellow products has a confirmed fund-loss-by-default flaw. Yellow means at least one of: (a) something security-critical sits outside independent verification. i.e., closed firmware or secure-element code (Opendime, Ledger, open source please!), vendor-run recovery infrastructure (Phoenix/ACINQ, Jade's oracle, Bitkey's WSM); (b) a real but bounded weakness, such as a zero-work-factor KDF (BlueWallet), weak legacy KDFs on a hot wallet (Electrum), no-SE DIY hardware with thin maintenance (SpecterDIY), a just-patched vulnerability awaiting its report (Bitkey); or (c) a dead/unmaintained product whose crypto reviewed clean (free Samourai!). In every case the entropy/key-generation path itself was reviewed and found sound unless the cell says otherwise.

@NetfixerFll @bitcoinsbanker @CaitlinLong_ @PPQdotAI @Coinkite @OPENDIME @SeedSigner @Bitkey @bluewalletio @PhoenixWallet @SparrowWallet No update will fix seeds already vulnerable

@bitcoinsbanker @CaitlinLong_ @PPQdotAI @Coinkite @OPENDIME @SeedSigner @Bitkey @bluewalletio @PhoenixWallet @SparrowWallet The coldcard vulnerability has been remediated.

@HeerJeet not counting the black people is a tell.

This is a fantastic argument for immigration!

@SatoshiBagger Maybe if they had that level of generosity when other wallets had issues. But no, they just shrugged with a smirk and said they were unaffected and offered a discount code. F em. Off to the dustbin.

Honestly: Do you think Coinkite and their Coldcard can recover from this? At work I sometimes prefer working with someone that has made a mistake and learnt from it...

@mechanakamoto Arrogance. Skeleton staff. Spent more money on marketing than security. Should cease to exist.

Bitcoiners What U think about the ColdCard thing? Be real

@tsusanka @em Does the entropy test only at initiation of the seed, or does it check each time the wallet is connected to the suite? I read it twice and am not sure. Example, say I created a seed years ago, will the suite be checking the randomness of the seed later on? If I recovered?

@em 👇 trezor.io/learn/security…

Randomness is the foundation everything else in a hardware wallet stands on. Get it wrong and nothing else matters. Not the secure element, not the air-gap, not the metal backup. Weak entropy during initialization = funds drained "remotely." No device access needed, attacker just recomputes your keys. It's the single most critical path in a hardware wallet, and we treated it that way from the very first Trezor Model One (just turned 12 years old!) by mixing device entropy with entropy from the host (computer or phone). Never trust one source. We deliberately designed it this way from the very beginning. The nightmare scenario is that test mode with weak randomness is shipped by accident. People think their wallet generated something truly random but it didn't. Anyone who knows the pattern can work backward and recreate their private keys and AI is definitely speeding this up. We run dedicated safeguards to make sure that can never happen in our builds. Trezor Model One and Model T mixed two entropy sources together (from MCU and from the host). With Trezor Safe 3 we took this further and added Optiga as an independent entropy source. Safe 7 mixes four: MCU, host, Optiga, TROPIC01. On all models this results to 128-bit entropy in default settings. On top of that, we also introduced Entropy Check back in February 2025. From a different angle: Let's finally retire the myth about air-gap. Air-gap doesn’t necessarily imply stronger security. With air-gapped wallets you miss this entropy from the host. If the randomness is not sufficient and keys are predictable, the attacker never needs to touch your hardware.

@bradmillscan Most flows are in ETFs and thus don't care.

I’m incredibly surprised Bitcoin has not sold off to make new lows on this hack news. If this does not drop us below 58k then that was likely the cycle bottom.

@JamesKhoroshin @_t_o_o_r_a_j_ The logic is that computers and hardware by their very nature are deterministic. Making deterministic machines create random numbers might be impossible to guarantee.

@_t_o_o_r_a_j_ Why is that ? Are you saying that all wallets random generators are faulty?

If you used your wallet's seed-word generation logic instead of rolling your own seed words, no matter which wallet you use, you are at risk. Perhaps not at immediate risk, but at risk.

@MrHodl @Bitkey @Ledger Pay cash! Don't give rewards account info at register!!!!

Just spoke to an MK3 user who didn't use dice. Their short passphrase wasn't brute-forced yet, funds are safe. Doesn't look like they're grinding passphrases yet. Don't wait! Create a new private key ASAP. If you're in America, Best Buy sells @Bitkey and @ledger. GO TO THE STORE RIGHT NOW AND GET A NEW HARDWARE DEVICE.

Wondering how MK3 addresses were identified. Was there a similarity in the actual addresses? Was only the /84 path addresses easily identified? Was only a subset of addresses identifiable? Why would that be?

@BitcoinTeacher_ @Scavacini777 @grok Get a new wallet is incomplete advice. Make a new seed phrase with other HW and use a password would have been better.

@Scavacini777 @grok Bro jus get a new wallet it isn’t worth it. Grok doesn’t know if you are at risk

So @grok since I rolled dice to generate my ColdCard MK3 seed phrase in 2023 then my seed wasn't really at risk?

@crypt0e x.com/truthyray/stat…

I've used Trezor's seed generator; how effed am I?

@JoeCarlasare @Trezor @Ledger Trezor uses a random number generator on the device combined with a random number generator from the host computer that it's using during seed generation. So if the trezor RNG was compromised, the seed would still have entropy from the RNG on the computer. So should be fine.

Any documented cases of issues with @Trezor and/or @Ledger ?

@BreeNewsome Apparently the good guy with a gun wasn’t the only way to combat a bad guy with a gun.

The capitalists have now created an entire industry around children being shot in schools Do we understand this?