TFTC(@TFTC21):Reports are coming in that some Coldcard hardware wallet users are having their bitcoin drained. Multiple known Bitcoiners are confirmed affected. @KLoaec’s working hypothesis is a low-entropy RNG issue, possibly in the secure element, with an attacker using AI to bruteforce and sweep only bip84 (segwit) paths, which would explain the partial thefts. Root cause is still unconfirmed. Could be RNG, nonce reuse, or something else entirely. If you use a Coldcard single-sig setup, check your balances now. If affected, email Coinkite with proof you control the keys.

TFTC

@TFTC21

Truth for the Commoner. Bitcoin, freedom, and truth in the digital age. Daily newsletter + podcast. Subscribe.

Joined October 2017

2.4K Following 116.1K Followers

TFTC@TFTC21

2026.07.30 20:57

Reports are coming in that some Coldcard hardware wallet users are having their bitcoin drained. Multiple known Bitcoiners are confirmed affected. @KLoaec’s working hypothesis is a low-entropy RNG issue, possibly in the secure element, with an attacker using AI to bruteforce and sweep only bip84 (segwit) paths, which would explain the partial thefts. Root cause is still unconfirmed. Could be RNG, nonce reuse, or something else entirely. If you use a Coldcard single-sig setup, check your balances now. If affected, email Coinkite with proof you control the keys.