I just find it so fucking weird that after this whole hacking event cold card isn’t being held responsible to reimburse people. I mean you sell a product on the promise that it’s secure and it’s really not that sounds like fraud to me. The people that got hacked should come together and get lawyers and sue them. I’m not sure how this all works or if they are legally held responsible for a hack, but it seems like they should be, but it’s still gray area I guess

Disclosure up front: ENTROPÍA is built by 12 Palabras, which is why I’m posting from this account. It’s free and open source; we’re not selling anything.

I kept seeing the same sentence: “I have the seed.” That answers one question, but not whether the passphrase is recoverable, wallet metadata survives, two backups share the same fire domain, the root email and password manager form a loop, or another person could follow the plan under stress.

ENTROPÍA uses aliases to map a Bitcoin wallet, devices, backup copies, email, security keys and trusted people. It then simulates phone loss, loss of the primary location, a missing security key, owner incapacity, possible seed exposure and root-email compromise. Each critical system is reported as available, blocked, unknown or compromised.

It never asks for a seed, passphrase, address, xpub or balance. The analysis runs in the browser, and an optional vault is encrypted locally.

The important limitation: it cannot prove that words written on metal are correct, that a device is genuine or that an off-site location is actually independent. A declared recovery path is not evidence; a controlled drill is.

The beta UI is currently in Spanish and the code is public: https://12palabras.github.io/

I’d genuinely like this model torn apart:

1. Which Bitcoin-specific failure mode is missing?

2. Is an aggregate summary without aliases or topology safe enough for asking for help, or would you still share nothing?

3. Would you use a browser-local tool for this, or only a downloadable offline build?

Please use a synthetic setup if you test it. Don’t post wallet data here.

I’m sorry but everything seems to be getting compromised and hacked rn. I’m sure I’m not the only skeptical one right now but I figure I ask for some input. Thanks

Edit: I do cold storage but rethinking everything since these hacks continue

I have been looking at the possible failure modes of lightning while a possible fork (however short) could happen. I don't want the hassle of watching 2 separate chains while this plays out. Any precautions that you are taking or am I just being paranoid?

Hey im just wondering if anybody know what is the cheapest way to deposit Euro to an Exchange now. Because bybit and binance offer is still expensive in my opinion the cheapest they got is 1% fee and if you deposit 10k Eur it would be 100 eur its just too much. Anybody got an idea? I would like it to be an instant transfer and not take 1-3 business days if possible

Anyone use Fidelity as a custodian. I reached out to them and they said they provide insurance for “unauthorized” transactions which would have come in handy with the Coldcard situation

I’m assuming this is not the case but I had this idea pop into my head and I don’t know what to believe anymore so I figured I’d share.

If any of these cold card hackers used LLMs and stupidly used an API key instead of a local / offline model to write the code to sweep the coldcard wallets, couldn’t the inference companies be subpoenaed to identify any users who prompted suspicious things around the time of this attack?

Most likely the code was written for a long time prior to the attack by the main attacker but any follow up attacker would’ve likely used LLMs.