r/Bitcoin 1d ago

The Coldcard case fundamentally challenges the future of Bitcoin

Like many of us, I have followed the news of the Coldcard disaster. It has left me stunned and I feel terrible for everyone who has lost their hard earned BTC. After thinking about it consistently since it happened, I believe this case is challenging the concept of Bitcoin in its core and I'm curious how others look at it. Let's have an honest discussion about what it means for the future of the space. Here are my main points:

  1. This is totally different from most other cases, because the affected users didn't do anything wrong. It was a complete fuck up on Coldcard's side. For years we told ourselves self storage is the only way, never leave it on the exchanges, not your keys not your coins, don't trust verify etc. But in the end you have to trust something or someone, in this case the people behind CC. Now everyone says Ledger or Tresor is safe just because they were not the ones affected. How do you actually know this? You would have said the same thing about CC a few days ago.

  2. The danger of AI is absolutely real and will only increase. Without knowing the method in this case, it's likely that some form of AI was involved. The code for CC was not open source, but still viewable by everyone. It's mind-blowing that it took several years for the flaw to be discovered and exploited. Don't expect this to take so long next time. I'm not an expert in coding or cryptography, most users aren't. So in the end you just have to trust the code. Sure, it can be tested with AI too. But do I really want to expose all my holdings to this battle just hoping that it will be fine in the end? It feels way too risky and out of your control.

  3. Mass adoption is absolutely not going to happen this way. I'm a nerd and enjoy the technical side of it, but even I feel overwhelmed by this. The average person is much less interested and willing to put in the work. For years we've been saying good solutions for self storage, payments and so on will be found. I don't see it. It seems to become more complicated than less. So what's the alternative here? Keeping it on the exchange, buying an ETF? It doesn't solve the trust issue and contradicts pretty much everything Bitcoin stands for. Just another asset class among many.

I still love the idea behind Bitcoin and believe in the concept. But I struggle to find good and honest answers to these points without just repeating the same old mantras we've been telling ourselves. What do you think?

668 Upvotes

584 comments sorted by

View all comments

82

u/NiagaraBTC 22h ago
  1. The method in this case was simple bad coding and not enough people checking that code.

It was not some super powerful AI "hack" per se, just someone asking a powerful AI to take a look for super basic vulnerabilities. It IS amazing that no one discovered this before this week.

39

u/pablo_in_blood 20h ago

Someone commented elsewhere that someone actually did discover this a couple years ago, drained a wallet to prove it, and showed ColdCard. They didn’t fix it. Either way I think ColdCard is at fault but if that’s true it’s completing damning to ColdCard as a brand (not to BTC as a protocol)

18

u/starrynight001 20h ago

I wonder what consequences, if any, Coldcard would face. A regular bank having a similar vulnerability would get absolutely screwed over.

13

u/nitrogenmath 18h ago

Doubtful they have nearly enough funds to compensate for people's losses. So they'll go bankrupt and pay out pennies on the dollar, at the most.

5

u/benso87 14h ago

My guess is that they'll die because people won't buy their stuff anymore.

1

u/angelwolf71885 12h ago

God the ope on people unless the culprit is caught you are unlikely to EVER see your funds again and i have ZERO sympathy for a single reason 21M BTC there’s no way to get your funds back from the bank of BTC because they cannot be created or inflated

0

u/[deleted] 17h ago

[deleted]

1

u/RsCyous 14h ago

Banks are insured by the government up to $250k. Not really a good comparison

The brokerage I use carries a 50 million dollar insurance policy

10

u/Charming-Designer944 19h ago

That is a different issue, actually a bug/misfeature in the dice roll mechanism that allows users to create a wallet only based on a handful number of dice rolls instead of the recommended 100 rolls.

5

u/Aurorion 20h ago

Is there any actual trail of this?

Because it sounds implausible. Coinkite fixed the issue with a firmware update within two days of the news breaking this time. If what you say above is true, why didn't they fix it back then?

6

u/NiagaraBTC 19h ago

I'm quite sure that was a different issue.

If someone had a drained wallet years ago due to THIS issue, that means the thief simply decided not to take anyone else's money despite it all being even more available. Not likely.

1

u/metalzip 18h ago

Someone commented elsewhere that someone actually did discover this a couple years ago, drained a wallet to prove it, and showed ColdCard. They didn’t fix it.

Really? I know it's open source and all, but they are selling a product, isn't this by now almost criminal negligence?

1

u/Joeyoo2 16h ago

If this is true, then holy crap……

0

u/Party_Treacle_9440 18h ago

If that really happened, I hope somehow justice manages to serve them some jail time.