1. Details on how exactly the attacks were made and funds were sweeped are unclear.
2. Unclear if it's an issue with Coldcard alone at the moment.
3. Sensing potential hyperbole and concern trolling from devleopers of multisig wallets. Tad annoying.
quotingFunds in some coldcards are getting partially swept.
nevent1q…tkfq
No cause for concern or hyperbole at the moment. Can wait till more details emerge before considering actions. But for the prudent, here are some threads to follow:
1. Rob Hamilton, CEO of AnchorWatch
•Preliminary analysis:
https://x.com/Rob1Ham/status/2082896614218203616
•Also mentions that only 4% of addresses were reused:
https://x.com/Rob1Ham/status/2082902437543678255
2. NVK, head of Coinkite, maker of Coldcard
•'No support or security emails to us related to this, only hear say and the Reddit mess.'
https://x.com/nvk/status/2082902502169510263
•Like many, he also speculates that it is a result of bad entropy:
https://x.com/nvk/status/2082891656676700344
3. Jameson Lopp, CSO of Casa:
•Friends say only a few UTXOs were swept and not all.
https://x.com/lopp/status/2082894501018767693
•Also says the swept UTXOs are not that old:
https://x.com/lopp/status/2082914565646413879
4. Kevin Loec, CEO of Wizardsardine, maker of Liana wallet:
•His hypothesis based on what he knows so far:
https://x.com/KLoaec/status/2082926304995762209