okay so next time I guide my mom through self custody I will make sure that she learns about entropy, hardware, verifies binaries in all software, red teams all software she uses with frontier LLMs, subscribes to all vulnerability disclosure channels (and…

PSA: I AM GETTING REPORTS OF NEW SWEEPS. MORE ATTACKERS ARE CURRENTLY DRAINING WALLETS.

GET YOUR COINS OFF COLDCARD NOW (if MK3) OR SOON (if Mk4, 5, Q)

I keep getting asked the same questions, and having various recommendations being thrown around must be confusing to people.

We should coordinate around a fixed set of simple instructions that non-technical users can follow, and spread that as widely as…

Airgapping protects against exfiltration, not against generating bad seeds in the first place, which we know just bit Coldcard users. A connected wallet can mix host entropy into seed generation, so a malicious host can only add randomness, never subtract…

One thing that keeps coming to my mind is that every Bitcoin transaction is recorded on a public blockchain. As blockchain analysis becomes more advanced, it seems like it could become easier for someone to follow where your Bitcoin came from and where it…

I was telling my wife about this and she was somewhat incredulous. She said something to the effect of: "I can't believe bitcoiners think this is gonna work! No one wants to take on this kind of risk!" I believe spouses often have a clarity about each other's…

There sure has been a lot of *talk* about Bitcoin development these last 18 months. Meanwhile, there's been an awful lot of actual development work done. Examples of what Bitcoin Core has been working on throughout this all:

- a node that syncs in nearly…

With the recent issue of coldcard users having their funds drained, some people are saying "move funds to exchanges to be safe". Bitcoin was not hacked, this was an issue of bad entropy. Self custody is still important, if you do not want to solely trust…

That's it that's the post.

This week’s newsletter warns about a severe vulnerability affecting wallets generated by COLDCARD signing devices, summarizes the disclosure of two denial-of-service vulnerabilities in Core Lightning, and describes a proof of concept for a zero-knowledge…

OVHcloud says it will contest criminal charges in Canada accusing it of failing to comply with a court-ordered demand for subscriber data.

Expert commentary on the Coldcard incident (July 2026). Key insights and security takeaways for crypto wallet users. Read now!

Você sabia que o empréstimo consignado pode ser a porta de entrada ...

What we know so far about the breaking news behind the ColdCard Hardware wallet hack, how it works, who is at risk and what you can do to safeguard your funds

But swears OpenAI’s Hugging Face hack was worse.

Over a thousand bitcoin moved today in an attack.

Doing emergency triage to identify the source of the issue this is how it went:

@AnthropicAI - Instant Downgrade.
@OpenAI - A little help.
@Kimi_Moonshot - One shot.

The US needs to get it shits together.…

Even if you take a pic in pitch blackness, there's always random sensor noise. Astrophotographers would kill for a perfect sensor. They don't exist.

Claude did an on-device test tonight. The diff from one blacked out frame to the next was still 74k bits.

So:

Dice rolls: Great entropy, no trust required.

Image entropy: by far the most entropy, but you're trusting the code.

I only use image entropy. But I totally understand people who will only do dice.

Good news: you get to choose.

I think this sort of reaction is brilliant. No need to put others down. Instead, take another look at your own work.

Basically the only thing keeping your Bitcoin safe if you just used software/firmware randomness to roll your seed is closed source right now.