I am very sympathetic to people who make mistakes. Even if it’s a catastrophic mistake. I try to put myself in the person’s shoes and imagine how hard it must be for them. If I was @N I would not be able to sleep at night before apologizing a million times. This motherfucker has not apologized once. Complete silence on nostr. All he has said on twatter so far is that he is devastated. You’re devastated? What about the users you fucked over with your arrogance and shady business practices, telling people other wallets are terrible and cockblocking seedsigner domains. And now he is deleting posts to try and salvage his reputation. Are you fucking kidding me? This guy is a fucking scumbag. image

Replies (95)

Yes. NVK has been on my craplist some the bitclock fiasco. I'm glad I'm not shocked like some people. I'm gutted that something so stupid was done that allowed this to happen. I also want to make sure that people are directing their ire at the correct issues, that of his unrepentant attitude and the impulse to cover things up instead of be accountable.
Man, that is the depths of suck. 💚🫂 Had my stack been swept, I'd be angry, but, I'm too po' for it to really matter. But, it gave me a huge pause to think about how much time and effort it took for me to scrape together what little I had and can't imagine that over a longer time frame.
Just imagine man, Coinkite is probably going to go under because of this. Don't you even care about NVK's feelings?? He was supposed to be the best, the king of the hill. And now he's NOTHING. That's devestating for any narcissist.
I'm still annoyed that aside from DIY options I still can't find a better solution even after this bug. Getting comfortable with stateless signers seems like a requirement going forward I guess.
Remember his stickers “no shitcoins inside” with the intel logo. Here’s the 2026 update 🥴 image
lol. Marty & Odell’s Ten31 were the only outside investor. And they onboarded many plebs who go their life savings wiped. There needs to be serious accountability.. NVK should be criminally investigated and Cold Card should refund all victims from the corporate treasury and shut down.
Default avatar
Roboto 2 weeks ago
Xpub doxing 👀 holly fuck! This has got to be the worst hack ever.
The community needs to verify more. I published the code as open source for a reason. This is everyone's mistake lol
Exactly. The issue isn't that a man made a mistake. The issue is that there is a long, historical, consistent pattern of poor behavior that had to inevitably lead to greater pain over time. My fear is that he will be allowed to continue on to even bigger harm if enough people don't speak up.
If you read the removal request letter it was pure incompetence. They left the secure element TRNG value in the code as 0 and the coldcard used a weaker fallback RNG to generate the seed.
+Ragamuffin!'s avatar
+Ragamuffin! 2 weeks ago
I even put a slap in the package that said "dont trust, verify"
Default avatar
Roboto 2 weeks ago
Once the attacker (or anyone) can derive a victim's xpub, that person's entire address history is computable. The moment any one of those addresses ever touched an identity anchor — a KYC exchange withdrawal, a merchant payment, a publicly posted donation address — the whole derived address set gets a name attached. So even is you moved your funds into another wallet to avoid getting hacked they could know you are the owner and follow any future transactions. You could get wrench attacked thrown in jail until you give up your funds.
I just don't want to make a public statement about any of this. Non zero chance I have clients impacted by the thing and it is what it is, but I expect its unlikely the company has sufficient funds to 1) defend a real lawsuit; or 2) refund if they lose. I suspect the company would almost immediately file for bankruptcy protection. I have no idea if its a canadian company or what but if its a corp. created under the laws of one or another state in the united states that's almost certainly what they would do and all the litigation would happen within the bankruptcy courts. All the lawyers would make their nut and I doubt much would be leftover. I doubt litigation is a good idea for anyone affected, but they should definitely talk to a lawyer to discuss their options if they are considering it.
Oh definitely dice rolls. That was already a given. Not your entropy, the coins weren't meant to be. I'm looking at self hosted oracle options for the Jade which I guess you can even run on an ESP32 board with open firmware to see if maybe there's hope for a stateful solution but I'm not holding my breath.
Also they might be charged with insider job, which I guess might have 3rd order effects. The amount of bitcoin that’s been stolen, I won’t be surprised if FBI doesn’t get involved. Rest in just speculating.
Thethird0cnzo's avatar
Thethird0cnzo 2 weeks ago
Yup I mean, the cold cards look cheap af... 12 words not 24, self proclaimed to be the best but turns out to be trash, all the podcasters promoting it, all confidence 0 accountability... This stinks of a zio scam op 💯
Thethird0cnzo's avatar
Thethird0cnzo 2 weeks ago
I literally ordered one and it never arrived in the mail. Another red flag for the zio tech coinkite co! I can't believe I almost got that trash! Fkn hell.
El Zeta's avatar
El Zeta 2 weeks ago
I got one a while back but was too dumb to figure it out lol im so glad! Thank you God 😊🙏 Retard maxxin to the max 🤣🤣🤣
El Zeta's avatar
El Zeta 2 weeks ago
Refund!! What refund Say it in a Brooklyn Jewish voice lol
Nah, went back and forth with email. I bought anon with btc... The fuckers said to keep waiting for it to appear in the mail... I emailed 1 month, 3 months, 6 months, and 9 months later. Eventually I realized they just didn't give af. Thank god! Fuck. I almost got zio'd!😂 I asked for refund and everything. They stopped answering. Absolute trash company.
I don’t have any evidence lol but if you give it a thought To me it seems obvious that bitcoin software and hardware supply companies would have been infiltrated or wholly owned by IC agents