I’ve been very quiet on the coldcard hack, but as this situation is unfolding it’s getting harder and harder not to say something.
I’ve never used a coldcard – not because I dislike anyone, or because I like someone else better, which seems to be much of the discussion here – but because I felt like coldcard was for very advanced users, and if anything went wrong, I’d be left to myself to clean up the mess.
What I find incredibly sad about this situation is that this is exactly what seems to be happening.
Who is posting updates on the hacks, which are still ongoing? Block. Galaxy. Developers that have their own projects to worry about, yet they are worrying about coldcard users.
Who is helping the affected make sense of what just happened? Everyone I know is busy helping others who lost funds, 24h around the clock.
Who is thinking of ways to return funds if the hackers are caught? Literally engineers on X and spaces that have no affiliation to the project.
*All of this* should be coldcard’s responsibility. And it makes me incredibly angry.
If there is any learning in this imo, it’s not that AI gets better and the script kiddies will get you next.
It’s that you should not be building hardware wallets that you sell to people who entrust you with their life savings when you don’t have the team in place to take care of them and make sure that they are safe.
Honestly quite speechless at this level of carelessness.
Much love to anyone who is affected.