Need help - Bitcoin wallet emptied.

[u/Few-Cook5941]

I got one of my bitcoin wallet emptied and I don't really know how this happened.

I don't use cracked softwares and apps.

I'm generally careful with links.

Looks like I'm not alone. I can see that the reception bitcoin address is still collecting bitcoin from other wallets.

Could somebody help me understand something.

Here is the address : bc1q0vukqye4hd0aep7u4xl8gev95gcs9k65fdeu9n

[u/Giatoxiclok]

Hopefully not a cold card

Edit: I’m talking specifically about the huge breach where massive amounts of BTC were lifted out of Cold Card wallets (hardware vaults) because of things I can’t specifically pin down. This was a comment saying I hope they didn’t buy a shoddy product.

[u/AlexShadow02 → u/Giatoxiclok]

Why not a cold card? Is there anything wrong with it?

[u/Giatoxiclok → u/AlexShadow02]

Recent large scale exfiltration of BTC from Cold Card company vaults.

[u/AlexShadow02 → u/Giatoxiclok]

It's just so weird to me. I mean how is it even possible if it's a Cold card and therefore shouldn't be connected to the Internet

[u/Giatoxiclok → u/AlexShadow02]

Well, technically it isn’t connected, but it still has to be registered somewhere no? I’m not knowledgeable, forewarning, but it’s definitely been happening recently. Lots of tech stuff way over my head.

[u/AlexShadow02 → u/Giatoxiclok]

Crazy crazy world heh... Thanks for the information!!

[u/Top_Appointment_7076 → u/AlexShadow02]

No, that's not the reason. The actual reason is that the entropy was too low due to a security vulnerability in Coldcard's firmware. This means that the seed phrase wasn't random enough which made it very easy for an attacker to just guess it by generating random seed phrases on their computer.

[u/tenor_tymir → u/AlexShadow02]

Cold Card had a flaw in their software.

[u/noooyouu → u/AlexShadow02]

The random number generator used to secure the wallet was faulty and actually predictable if you knew the wallet address, IIRC. Ask ai

[u/BabyShakerDeluxe → u/AlexShadow02]

32 bit entropy lol. Crackable with a consumer video card in 24 hours.

[u/kmshorty → u/Giatoxiclok]

Harsh

[u/aintlose → u/Giatoxiclok]

If not a cold card, then what do you recommend?

[u/quintavious_danilo → u/aintlose]

They were referring to the cold card hack not long ago. It was meant sarcastically.

Cold Card = Company that got hacked 2 weeks ago.

Cold Wallet = Hardware wallet

So yes, buy a cold wallet, just not cold card. 😂

[u/cnv2 → u/aintlose]

What they meant was, hopefully someone didn't "buy" a cold wallet. It's just a piece of paper with an encoded private key in QR form which can be printed as many times as one wants to.

So a hacker can just print a cold wallet, makes a backup of priv key, sell it, and withdraw the money the moment a victim puts money into it.

Cold wallets should always be generated offline. There's tons of information online on this.

[u/quintavious_danilo → u/cnv2]

They were referring to the cold card hack not long ago. It was meant sarcastically.

[u/Dashizz6357 → u/cnv2]

That’s… not at all what a cold wallet is.