Hacker News Reader

Comment by serf | Hacker News Reader

5% of btc users use a hardware wallet and Cardkite wasn't even in the top 5 MFGs as far as i'm aware.

also as far as I care the btc community members who chose to go with one of the few hardware wallets that wasn't open source were not doing due their diligence.

>My guess is that the next phase is to revise history and form a consensus that Coldcard was never a recommended wallet and that it was obvious to everyone with good OPSEC at the time.

if that's a worry just search for things far before the exploit date; lots of unhappiness around cardkite for a while now -- but to be clear, it's nowhere near a revision.

View on HN

> but to be clear, it's nowhere near a revision.

That’s how the retroactive victim blaming always works: It is retroactively determined that there were signs, which turns into victim blaming anyone who didn’t predict that those signs would lead to loss of their coins.

You are doing it.

> also as far as I care the btc community members who chose to go with one of the few hardware wallets that wasn't open source were not doing due their diligence.

I can’t tell if you’re confused about the details of this story or if you’re trying to make a point that isn’t landing. You may want to read up on the open source status of the wallet before doing the whole victim blaming song and dance.

> also as far as I care the btc community members who chose to go with one of the few hardware wallets that wasn't open source were not doing due their diligence.

Seems like part of the issue here is that it was open source in a way that from the discussion here (https://insider.btcpp.dev/p/when-randombytes-runs-but-doesnt) may have made vulnerabilities easier to spot for an attacker...?

Cold wallet was definitely recommended late 2025, along with the meme of using dice to generate the entropy. Ledger wasn't recommended by coldcard definitely was

At least my dice don’t boot up with insufficient entropy

Did the dice method prevent this attack? I only skimmed about it being that the seed was mistakenly using 40 bits of entropy but I don't know at which point of the generation the bug was.

Yes, using dice would have prevented this.

Reply on news.ycombinator.com