$38 million. 594 BTC. 500 wallets.
That is what a single entropy bug just cost Coldcard users. No malware. No stolen device. The attacker simply recomputed their keys because the randomness was weak.
You think your hardware wallet is safe. So did they.
"Not your keys, not your coins" means nothing if your keys are predictable.
Blockstream Jade is open source, air-gapped, and verifiable. Every line of code can be read by anyone. No black boxes. No "trust us, we fixed it."
Your keys are only as safe as the randomness they were born from.
Coupon LOVEISBITCOIN.
Link: loveisbitcoin.com/blockstream loveisbitcoin.com/blockstream
Love is Bitcoin 💜⚡
npub1kw…qf3xx
2026-08-01 09:04:07 UTC
Author Public Key
npub1kwcatqynqmry9d78a8cpe7d882wu3vmrgcmhvdsayhwqjf7mp25qpqf3xxPublished at
2026-08-01 09:04:07 UTCEvent JSON
{
"id": "077a9dd8e260a9ca46f149101eed60222c464407842b009fb8051845054e4aca",
"pubkey": "b3b1d5809306c642b7c7e9f01cf9a73a9dc8b363463776361d25dc0927db0aa8",
"created_at": 1785575047,
"kind": 1,
"tags": [
[
"t",
"bitcoin"
],
[
"t",
"selfcustody"
]
],
"content": "$38 million. 594 BTC. 500 wallets.\n\nThat is what a single entropy bug just cost Coldcard users. No malware. No stolen device. The attacker simply recomputed their keys because the randomness was weak.\n\nYou think your hardware wallet is safe. So did they.\n\n\"Not your keys, not your coins\" means nothing if your keys are predictable.\n\nBlockstream Jade is open source, air-gapped, and verifiable. Every line of code can be read by anyone. No black boxes. No \"trust us, we fixed it.\"\n\nYour keys are only as safe as the randomness they were born from.\n\nCoupon LOVEISBITCOIN.\nLink: loveisbitcoin.com/blockstream loveisbitcoin.com/blockstream",
"sig": "20df6ee8f4bb24cf401dd026f75a29f17b20155182bb45a5711f2bdee75ae32fd0cbb4072d5e5f3d3f34cc84afa4458b5153f112fb5b308b432eeca76863a869"
}