Several Coldcard honeypots were cracked by thieves and their BTC was swept to fresh, single-use addresses.
Why is this concerning?
Because on the blockchain, transfers like these are indistinguishable from Coldcard owners rescuing their coins, so these cases would likely not be counted in the current loss estimates (~$116m).
So how much bigger could the actual loss be? How many other transfers match this profile?
Answer: ~36k transactions totaling ~$2.1bn of BTC. These transfers are equally consistent with an owner rescue or a theft, and nobody can determine which.
The actual Coldcard loss could be *much* larger than current estimates.
See how these numbers were determined:
显示更多
Here is information on all the mk3 wallets I created, that HAVE BEEN SWEPT by attackers:
Seed phrase only (swept instantly):
bc1qqh58wf33u6vcpurh493j46d23zz7jyn5s06sqn
Seed phrase + 1 word passphrase (swept in 6d 9h):
bc1q4nhqvhyvs342m52h46qw0mkjsejpcncwx4y46t
Seed phrase + 2 word passphrase (swept in 6d 9h):
bc1quz3e7l8ln8dh6e4q2xslzwk7kxn0qh5stqjjjc
Seed phrase + 3 word passphrase (swept in 6d 11h):
bc1q8u657zxp084pxgm5fcr5rgfqyyw4uvq8jzm87d
Seed phrase only, random account number (swept in 2d 2h)
bc1q4gj72x6zz3ax7q6fh4gefamcjjuhu6q0jpf03h
显示更多