Coinkite lying? New wallet attack?

There's a solution for the third issue you mentioned here with @PortlandHODL 's Slipstream Service. Basically a transaction is broadcast to @MARA 's private Mempool.

@PortlandHODL @MARA Yep.

Honestly sending it to a private miner API is probably the best choice, because at least then if it gets sniped, you know it was the miner who did it

This makes no sense. You can't derive private key from public key regardless of low anthropy. You can bruteforce private key and derive addresses and compare them with mempool but at that point you could already sweep the funds from those addresses.

Any reports of the many “influencers” who recommended CC through sponsorships affected? 🤔 I’ve not seen any, which is weird…even if they ALL rolled the dice and escaped consequences…if they didn’t recommend same? Shameful 😔

@BTCLeukocyte_WR Thank you for this Sheds more light in the dark as we all navigate in these hard times

Thank you for sharing.

That’s insane that they can snipe this quicker than you can get this transferred back to your new wallet, which presumably only take a certain amount of minutes.

Why are you actively driving while making this video? Ffs why does everyone think their car is the best place to record a video.

You don't like people who talk in their car?

No. Why is that the place you decide to record? Are you just constantly driving from location to location and don’t have 3 1/2 minutes to sit down in front of a wall or outside? It’s such a boomer thing to do. Low effort af.

When I told people from my car on Friday that passphrase wallets are vulnerable, despite Coinkite saying they were safe, I wonder how many people listened and saved their money. As of today, wallets with passphrases have started to get drained. I wonder what you'd say to them.

Ok ur referring to an RBF

Yes.

Good info!

Thanks for the update on this, Adam. Do you know if anything changes if a person first sends their BTC to an exchange with high security, such as Coinbase, @Strike, Etc and then moves the BTC to a new wallet solves the mempool issue? 🤝

@Strike It does not. The only way to solve this is getting included into a block directly with a miner. MARA had a service called Slipstream.

@Strike 😔 sad day Praying these people 🙏

The “new attack” you mentioned makes no sense. Why would knowing pub key help hackers to break the private key? What you mean “target” their attacks ? The whole low entropy exploit is to numerate seed hence private key and then check if the derived public key has any funds.

why would sending to another wallet be bad if you randomly generate a seed from a different hardware wallet to receive it ?

i don't understand. The attacker already has ur private keys but is waiting til u move it and then they RBF? Why would he wait til u move it?

The attacker doesn't have the private keys yet. But can target you once they know your public key, which happens as soon as you broadcast a tx.

@GFYmunney BS

@AdamSimecka Ya I get it now. That’s why never reuse same addresses bc ur pub keys are only exposed when u spend

I'd be surprised if passphrase attacks are in play yet. Actually, same for the sniper attacks. As long as the low-hanging fruit is still available it doesn't make sense to go after passphrases and sniper attacks.

The sniper attack has already happened at least once. This was confirmed by my source.

Would love to learn more about sniper (rbf?) attack. If single sig then why would anyone wait for broadcast? If multisig then how did they figure out which compromised keys belonged to the broadcast transaction? I'm not saying it didn't happen...I'm just trying to understand.

I don't know all of the details, but this only works on vulnerable wallets due to the Coinkite bug. Single sig.

Can’t listen rn.. are you saying you’ve heard of the RBF attack already having happened today?

The rbf attack has happened to at least one person. Thats what the video talks about.

Dang!! 😞

What a shit show!

It should work unless the validators reject it and help the hackers. But you would have to send all your funds at once cold turkey no test transaction.

Many are talking about this.

lawyer up Novak

hackers RBFing those transaction on the mempool

Wouldn't the defense to a memepool attack be to pay high fees to ensure you get in the soonest block? So even if they do attack a wallet that is trying to move, you beat them.

No. They can always RBF a higher fee and you wouldn't know.

But if you paid a high enough fee to be in the next block, they would need to do this in 10 minutes or less if you time the transaction, right.

If you send to a new wallet, make it multi sig

Is a better option to use your 24 word seed phrase to move to another brand wallet. ?

Why do people make videos when driving

Make sure you increase the fee so it it doesn’t hang in the pool for one thing

What other wallets (HOT/COLD) are VULNERABLE. ???

Sounds crazy. Is this actually true or just a rumour? Snipping transactions on mempools? Has there been more than one person to who this has happened since you posted the video?

Thanks for the info