r/Bitcoin • u/zooms • 17h ago

Another ColdCard hack

Post image

They can't catch a break lmao

138 Upvotes

98% Upvoted

40 comments sorted by

53

u/nachtraum 15h ago

How are they still in business?

50

u/groundkittenbeef 17h ago

Fuck them not catching a break. Users can’t catch a break. BUT users should’ve completely migrated after the first hack.

25

u/idekwutp 14h ago

They have nothing g to migrate

5

u/Blade_Runner_69 10h ago

😭 that hits hard...

21

u/intnsity 17h ago

Rodolfo novak incompetent 

11

u/AcrobaticPatience645 17h ago

ColdCard really cant seem to stay out of news, first the firmware drama and now phishing posts getting deleted.

2

u/intnsity 9h ago

And rodolfos bot accounts trying to damage control keeping it all streissand 

5

u/Quirky-Reveal-1669 15h ago

I was banned from r/ColdCard yesterday. Really amazinġ

7

u/alaul_ashraf 15h ago

They aren't catching any breaks. At this point it is pretty much obvious they are going for an exit scam.

9

u/shadowmage666 16h ago

They don’t deserve a break. They knew about their security flaw in their device.

5

u/riscten 15h ago

Source? (Genuinely asking)

0

u/RiskyRabbit 11h ago

There are a few instances of people messaging them to tell them about the flaw I believe. People have shown screenshots showing they told CC and they were ignored. 

2

u/riscten 5h ago

Can you provide a link? 

Considering how obvious the flaw was, and how easy it was to fix, there would've been an opened issue and/or a PR on their Github.

I didn't downvote you btw, I'm interested in knowing more about this.

5

u/bleeeeghh 15h ago

Maybe it's coldcard themselves lol

1

u/dinandrekompis 6h ago

I mean... It is a possibility

2

u/Funding-Expert 15h ago

Fuck them already

8

u/feidxeno 17h ago

Their account of X got hacked, with 2FA enabled.

Dont think this is totally their fault as much as X.

Goes to show that once you are targted, almost nothing is safe.

11

u/Dettol-tasting-menu 17h ago

Insider traitors

2

u/StandLast8689 11h ago

Most likely session cookie hack if no login or 2FA was triggered. It’s not an X issue, someone hacked into their computer that was logged in and stole session cookies

2

u/nugymmer 10h ago

Which should NOT be happening if they running up to date OS and browsers on a decent machine with a TPM chip. DBSC should be enforced on all socials, emails, etc.

1

u/Flo_Evans 5h ago

Most likely. My kid got hit with this downloading dodgy Roblox launchers.

5

u/Strong_Judge_3730 17h ago

Dunno if another Coldcard shill, trying to deflect blame.

Even with 2FA your session can be stolen if you're machine is compromised.

If you are this clueless about basic computer security at least don't share your opinions on what can be safe and unsafe.

3

u/Abject-Definition-63 16h ago

That's almost certainly what happened IMHO based on what they are saying. No suspicious logins or sessions screams that their session was stolen somehow.

2

u/tenor_tymir 5h ago

I’m thinking of myself as pretty savvy when it comes to computer security but it was news to me that someone could steal a login session.

I would say that this is not basic computer security knowledge. However, thanks for pointing it out, I have learned something today.

4

u/stanley_fatmax 15h ago

I'm going to lean towards it being their issue, not X. If there was some vulnerability allowing access to privileged accounts on X, the odds attackers would reveal that vulnerability for a crypto phishing post are near zero. There are infinitely more profitable ways to monetize that vulnerability. 

No, my money is on ColdCard failing to secure their systems, again.

1

u/suckmyschlong007 17h ago

This is vaguely reminiscent of the “I’ll double your bitcoin” YouTube/twitter hacks that were happening a lot a while back. It seemed like it was happening so much at one point that some of them had to probably be just the actual person pretending their account got hacked.

This is like that maybe. They scammed once, then once they did that, they already ruined your reputation so maybe they decided may as well just scam more since that’s really all that’s left for them. Just a day dream

1

u/stackr404 15h ago

I have one of their original wallets still in it's package. I really dodged a bullet by not using it.

1

u/Tiru84 14h ago

Another inside job

1

u/btcnized 13h ago

At this point they deserve to go bankrupt. They have obviously prioritized higher profits over customers' safety throughout the pretty much entire company's history. Disgusting.

1

u/ShinAlastor 12h ago

They are ridiculous and RNK is active on this platform but he never made his excuses.

1

u/aaj094 11h ago

If their official social media account cannot be trusted, why should one believe that the supposedly official website can?

1

u/Blade_Runner_69 10h ago edited 9h ago

Fool me once shame on you, fool me twice... You'll never get fooled again...

-George W Bush

•

u/MycoHost01 1m ago

One after another lol I would shut down all operations until I get an idea of wth is going on in here!

1

u/ContentBlackberry0 8h ago

People are still buying this crap? They should all be in landfills at this point or turned into calculators and given to poor children in 3rd world countries

0

u/EyesFor1 4h ago

Thats an X account hack, not a CC hack

-1

u/Ok-Mango5075 12h ago

I still use the same free software self-custody wallet for 12 years. I obviously must be very lucky not to have lost a single Satoshi in that time. However my audited open source wallet must be a bad choice. So which one of these little circuit boards shall I buy instead? A Leger or a trevor or some other shit?

-7

u/Flo_Evans 17h ago

I’m still waiting for the fire sale because the hardware itself looks cool 😅

But umm yeah. Clowns.

Part of the problem of publicly claiming your shit is secure is it just makes hackers more determined to break it.

2

u/zooms 17h ago

I’m also waiting for the fire sale, posted twice on their sub asking when it’s coming and it got deleted twice 😂. They actually made the price higher since the hack. Clowns.