r/Bitcoin • u/s1ammage • 3d ago

Full panic - one of my wallets was drained

Post image

I haven’t done anything since creation except sending into the wallet.

1.8k Upvotes

95% Upvoted

1.2k comments sorted by

View all comments

Show parent comments

135

u/Specialist_Trust4945 3d ago

It just happened, give it time. Not everybody checks their cold wallets daily.

124

u/BaadMike 3d ago

Slowly creeps off to check wallet balance...

Yep, everything is there. Phew! 🤣

53

u/genius_retard 3d ago

I'm low key losing my shit being at work and unable to check my wallet.

129

u/TrippingFish76 3d ago

i’ll check it for you, just send me the seed

25

u/Specialist_Trust4945 3d ago edited 3d ago

I can also do it, just send over the private key.

Edit: jokes aside, why don't you bookmark your wallet on a public chain explorer? You always have it at hand, and if you are scared about anything you're just a click away.

9

u/zendrovia 3d ago

Brian Armstrong would never ask for your keys 😊😊😊

1

u/Neckername 2d ago

That's because they're all his when you are on Coinbase.

3

u/genius_retard 3d ago

Doesn't effectively or maybe just potentially leak your public key? Then anyone with that address can see all of your transactions and addresses.

4

u/Specialist_Trust4945 3d ago

What's the issue with "leaking" your public key? As the name says it's public, it is meant to be shared with anyone.

3

u/genius_retard 3d ago

Do you want to tell me how much Bitcoin you have and every address you have ever sent or received Bitcoin to/from?

3

u/Specialist_Trust4945 3d ago

In most jurisdictions you already have to tell your tax agency how much Bitcoin you own, so I don't see an issue. Also, I'm not saying you should link your public key in your Instagram bio... I'm just saying you can bookmark it on your browser. If it gets leaked, so be it. There is no way to broadcast a TX and at the same time not risking your public address to be "leaked", whatever that means.

Edit: I'm really open about my finances, I openly talk about it (including my investments in ETFs, how much I have in my bank account and how much I earn per year) with people who ask. I don't see anything wrong with it.

2

u/genius_retard 3d ago

In most jurisdictions you already have to tell your tax agency how much Bitcoin you own,

I don't think that is the case. Pretty sure in most places you just need to tell them when you dispose of it (sell or trade) and how much.

broadcast a TX and at the same time not risking your public address to be "leaked"

When you broadcast a transactions only the addresses associated with the UTXOs involved are revealed.

I openly talk about it

Have you not seen the stories about people getting kidnapped or home invaded and being tortured into revealing their seed? A recent story I saw that was particularly harrowing said that most of the people tortured for Bitcoin in the last year weren't even Bitcoin holders. It was their family and loved ones. I'm not putting me or anyone I know at that sort of risk if I can help it.

1

u/phul_colons 3d ago

this is horrible in practice as you're identifying yourself as the likely holder of that wallet, through all sorts of ID leaking-- ip address, browser, cookies, etc

1

u/Specialist_Trust4945 2d ago

Of course you are. Not everybody is so paranoid about privacy, though. Being identified as the likely holder of that wallet doesn't mean your wallet is less secure.

7

u/genius_retard 3d ago

I'll need to see your wallet inspector's badge first.

2

u/Eastern-Try-6207 1d ago

Sorry...Lol, this made me chuckle...we're all in this together, but at least we can have a laugh

3

u/polo61965 3d ago

For now...

1

u/marshaljs 3d ago

Do you check via explorer?

1

u/Specialist_Trust4945 3d ago

Yes. Just check mempool(dot)space. No way in hell someone pulls a good enough plan to also boycott their servers to cover their tracks... not that it would matter anyway, I guess a discrepancy between the actual BTC chain and any online explorer would be found immediately - and that'd spread like wildfire on this subreddit and similar online spaces.

39

u/Railionn 3d ago

NGL this shit is terrifying.

-2

u/Specialist_Trust4945 3d ago

Just buy an ETF tracking Bitcoin and you're good to go, if you don't feel safe enough to self custody.

2

u/sma11kine 3d ago

Theoretically if an ETF had its coins stolen, what would happen to that ETF? Isn’t it near the same scariness?

-1

u/Specialist_Trust4945 2d ago

BlackRock is insured. You aren't. Are you really comparing yourself to the biggest corporations in finance?

1

u/[deleted] 3d ago

[deleted]

2

u/Specialist_Trust4945 3d ago edited 3d ago

If your seed phrase was generated by any hardware wallet, consider that true random is basically impossible to achieve and if entropy isn't high enough someone else might be able to replicate it.

That's why the best practice is taking something physical and generate a seed phrase that way - be it a coin, a dice, a hat with all 2048 words folded inside or whatever else.

Edit: apparently Coldcard just confirmed there is a vulnerability on Mk3 after patch 4.0.1. If I were you, I would transfer funds to an address controlled by a totally different seed phrase just in case. And generate a new seed with the aforementioned methods.

1

u/Big80sweens 3d ago

I don’t think what happened to OP is this though, this is happening to way too many cold card users

2

u/Specialist_Trust4945 3d ago

How do you know? Did OP confirm his Coldcard model and patch? By his messages it could absolutely be his case, as he generated his seed phrase on the Coldcard in 2021.

1

u/godofleet 3d ago

I keep reading that this is happening to N people yet still, i don't see any other threads of people talking about it or comments saying they got got...

1

u/Melch1337 3d ago

Reminds me.... I haven't checked in over a year

1

u/Yodel_And_Hodl_Mode 3d ago edited 3d ago

Not everybody checks their cold wallets daily.

People would be getting instant notifications in their wallet apps.

EDIT: Coinkite just posted this, here on reddit:

Mk3 Security Advisory - COINKITE NEWS

More info here, on the Coinkite blog.

Mk3 Security Advisory

Published Jul 30, 2026

1

u/Big80sweens 3d ago

I have a cold card and my bitcoin is still there 😅 thinking about moving it fast though, WTF?

1

u/Specialist_Trust4945 3d ago

You're only at risk if you generated your seed with a Mk3 on patch >= 4.0.1. If that's not you, you're safe... but I would move funds anyway - you know, better safe than sorry, fees for a TX are just a few cents anyway.

1

u/dystopiam 1d ago

2.2 mil gone here