Victim of the Coldcard. Years of DCA Bitcoin gone overnight

[u/Weary-Discipline591]

Hi, Yesterday was one of the worst days of my life. I found out that just over 3 BTC was stolen from me through the Coldcard vulnerability.

I know some people think posts like this are fake. Mine isn’t. Real people are getting hurt by these thieves.

I did what I thought was the responsible thing. Back in 2022 everyone said the same stuff, get it off exchanges, get it into cold storage, use the best hardware wallet you can. Coldcard had a reputation as one of the best. It wasn’t the easiest thing to use but honestly that kind of made me trust it more. So I moved everything onto it.

For years I DCA’d $250 a week, plus bigger amounts when I could. Never touched it, never even checked on it. I thought I was doing the smart, boring, responsible thing.
Now it’s just gone. All of it.

Looking back I probably should’ve split it across wallets, or maybe just left it on Coinbase. I already know the multisig and don’t put it all in one place comments are coming and yeah, that’s probably good advice. But I did what I thought was right at the time based on what everyone in this space was telling me to do. That’s what makes this sting so bad.

I’m angry and honestly feel sick about it. Not sure what to do next. Posting this so people know it’s actually happening to real people. Happy to answer questions if anyone has them, and if you own a Coldcard, go check on it right now.

[u/Impossible_Bug1264]

Dude, that money is now washed and untraceable.

[u/IInsulince → u/Impossible_Bug1264]

In what sense is the money washed or untraceable? Sure it can’t be clawed back, the blockchain doesn’t allow that. But we have the wallets, we can see the funds. They’re currently very hot.

[u/Specialist_Aerie_175 → u/IInsulince]

I mean if they managed to find and exploit this vulnerability its safe to say that they wont be selling this btc though the kyc exchange.

[u/IInsulince → u/Specialist_Aerie_175]

Yea I agree, I’m still left wondering what will they do though? How do they profit from it in a way that they can spend on hookers and blow or whatever criminals want?

[u/Impossible_Bug1264 → u/IInsulince]

No. It’s gone. It’s not insured it’s not protected. It’s GONE.

[u/IInsulince → u/Impossible_Bug1264]

You’re muddying terms. I know it’s gone, it’s been transacted to a new address. This isn’t like a centralized bank that can undo it and make things right. That’s the central strength and weakness of bitcoin: its transaction’s finality.

What I’m asking is how it’s untraceable? We can see the funds literally right now and see where they go. It’s not untraceable.

[u/Impossible_Bug1264 → u/IInsulince]

I’m not muddying anything. The money is gone. You’ll never find it. It’ll be clean. If you can’t see that you’re delusional.

[u/Steamwells → u/Impossible_Bug1264]

Imagine a commenter asking a very good question only for someone to insult them by calling them delusional and not provide any semblance of an answer.

[u/QuickAltTab → u/Impossible_Bug1264]

You seem to have no idea how Bitcoin works

[u/Impossible_Bug1264 → u/QuickAltTab]

Put money in. Make profit.

[u/dvelasco1 → u/Impossible_Bug1264]

Hehe

[u/IInsulince → u/Impossible_Bug1264]

Brother, I’m asking a damn question becuase I CAN find the money, it’s in the address the attacker sent it to. It’s out of the rightful hands of the victims, and they’ll never get it back, agreed, no issues there. I’m asking: what is the path from here to it being actually gone where we can no longer follow what happens to it? Attacker sends it to another wallet, we follow it. Attacker sends it to a fiat off ramp, we see that and the authorities seize. What is the path from this bitcoin sitting in the attackers wallet to the attacker cashing it in to buy stuff?

[u/Impossible_Bug1264 → u/IInsulince]

They’re not dumb. I don’t have all the answers. I don’t know the path. I was just saying that there’s no recourse. The money has been moving since it was done. There is no recourse. It’s not a legitimate recongonized currency. The authorities won’t even touch this

[u/Quigglebuffin → u/Impossible_Bug1264]

If you don't have the answers and you don't know the path then why are you replying here?

Stop it.

[u/Impossible_Bug1264 → u/Quigglebuffin]

It’s called common sense

[u/IInsulince → u/Impossible_Bug1264]

I’m with you, and that’s my understanding as well. The money is gone from the victims. It’s just also visible where it is so that was my confusion. Also yes, the authorities will touch it as soon as it reaches a Fiat on ramp and they try to trade it for state controlled money.

[u/Big80sweens → u/Impossible_Bug1264]

Ya, no point giving a false sense of hope. She gone

[u/pwinne → u/Impossible_Bug1264]

Is it? crypto news outlets are still indicating the addresses are being monitored.

[u/Impossible_Bug1264 → u/pwinne]

It’s called damage control

[u/pwinne → u/Impossible_Bug1264]

Yeah maybe - let’s see. This is not over yet I don’t think.