@HODL TIME SENSITIVE!!!! LIKELY 4TH ORGANIZED WAVE COLDCARD ATTACK OCCURRING RIGHT NOW THERE ARE STILL SIMILAR TXS IN THE MEMPOOL WAITING TO BE CONFIRMED AND THE PREVIOUSLY-CONFIRMED TXS SIGNAL RBF OPT-IN, CHECK YOUR FUNDS AND YOU MAY BE ABLE TO RBF YOUR WAY OUT OF THIS pattern identified: blocks 960,778 - 960,792 (last ~2.5 hours, still going): • 218 transactions, 462 victim addresses, 216 fresh destinations. • 388.92748828 BTC • EVERY one has ZERO inputs predating the Coldcard firmware boundary • Rate 13.8 sweeps/block vs 0.3/block in a pre-incident control window = ~45x elevated • Topology is 1:1 — one fresh destination per victim, only ONE destination received two sweeps. No collector funnel. • Some funds have already been swept into 2nd hop addresses. these are LIKELY Coldcard victims -- they match the shape of coldcard vulnerable utxos and the elevated transaction pattern gives me high confidence they are another wave of attacks MOVE YOUR FUNDS OFF COLDCARD DEVICES ASAP AND USE HIGH TX FEES more details to come as this takes shape

Feeling hyper vigilant and paranoid. Going to keep my node synced. Dust off some a variety of hardware wallets from different vendors, set up and backup a new multisig, and make sure I don’t need to worry about having options to send to if coldcard is just the first of a series of “oh fuck” moments. Pleb mode activated.