For a second I was very confused, the name is just too close to Yogg's coldkeys.
Same as that, I thought Yogg was sweeping the remaining cards or something.
Apparently this draining has been happening for years to a few unsuspecung users, meaning that someone was aware of the randomness flaw since a few years ago.
In 2022, a brand new Coldcard user was drained after transferring funds to it.
https://www.reddit.com/r/Bitcoin/s/NJXFF7hI0aThis definitely makes it a scandal now, given that the victim was blocked for reporting this, and this could possibly see Coinkite employees getting put on trial for this.
With that lost case in 2022, and this video about the same issue two years ago.
https://www.youtube.com/watch?v=oj_W3xOlt6UColdcard team completely ignored that terrible security issues of their hardware wallet, it's very hard to understand why they ignored that risk. I see they can be blind and terrible with coding, did not realize it but if there are people from developers in community to users reporting such security issues, it would be time for them to sit down, analyze it and realize their mistakes and fix them years ago.
These things make me have my own conspiracy theory like "Does Coldcard team stay behind this massive wallet drain?"
Like
yogg.My Cold Keys Just Got Swiped! All Cold Kuntz!!For a second I was very confused, the name is just too close to Yogg's coldkeys.
I mean your shoutout is nice. I agree, they deserve some merit. However it should just be a given that safe key-generation and no ill-intent is very base-level of what makes a good crypto-collectible producer.
It's like saying a beer company deserves a shoutout because for over 10 years they never used toxic ingredients. It should be the base layer of a decent beer producer.
To be fair, having a secure way of managing keys is no simple task and nowadays attack-vectors for are even larger, apparently there are many AI based hacking tools that can finde exploits much easier than it used to be in the past.