If you use a Coldcard hardware wallet, please pay attention. If you know someone who uses one, call them. Text them. This appears to be one of the most serious wallet security incidents Bitcoin has seen. If you're affected, don't wait. If you need help, reach out.

Please don’t hesitate to reach out if you need help. Strike customer or not. DM me, DM @Strike, or contact our support team. Bitcoiners take care of Bitcoiners.

Thanks for helping to spread the word, Jack.

Well, Jack I was caught up in it and couldn’t get a new device until tomorrow, so I’ve put all my Bitcoin on Strike, a port in a storm so to speak. I had some issues getting on to your platform and your staff were super helpful and super quick at getting me sorted. Thanks Jack. Appreciated.

❤️ Don’t hesitate to reach out if you need anything

Thanks Jack. Screw the haters your a top man, it’s the I was a Strike customer in the first place and able to get my Bitcoin to safety.

how i sleep at night knowing my bitcoin is on a exchange

$XXI holders lost far more than Coldcard's. Can they reach out to you for help?

Sure

I got 2.1 btc stolen from mk3. Havent touched in 4 years. Happened july 29th brutal.

@hodlonaut I think $XXI shareholders want some help

@saifedean Use Coldcard don’t use Coldcard. Use Trezor don’t use Tresor. Use Ledger don’t use Ledger. Use Jade don’t use Jade. WTF actually 🤷🏽‍♂️

Thanks Jack. I've been trying to warn and help everyone I can. Can you refer me to the correct person to ask about security models for exchanges in general and especially Strike? I am wondering if there is any exposure at all to these types of hardware attacks or if the setup is totally different? I respect security by obscurity/opsec but I am curious so I can understand the risks and help as many people as I can. Thanks again.

Of course. Feel free to DM me or @Strike. We can answer any questions you may have

@Strike I DM'd you thanks Jack

Procrastination saved me. I was going to buy one, but I just kept putting it off.

Respect the urgency and the offer to help people, but recommending a CEX (even a "trusted" one) as the default move goes against #Bitcoin ethos. Panic-moving to a centralized exchange trades one risk for another: counterparty risk, KYC exposure, potential freezes, and giving up self-custody. That's not "safer" in the long run — it's just different. Bitcoiners who can still move should: 1. Generate a new seed on a known another audited device 2. Verify the backup properly 3. Move to the new addresses Self-custody is the point. Temporary CEX parking might feel convenient in the moment, but it shouldn't be the first recommendation when the actual fix is generating new keys and staying sovereign. Not financial advice. Just the Bitcoin way.

coldcard just got absolutely smoked by a 5-year-old entropy bug and half of bitcoin still treats hardware wallets like they’re invincible. if your seed came from an mk3 (or early mk4/q) without serious dice rolls, you’re not “secure”, you’re a sitting duck. move the coins today or join the 594 btc club

Everyone should have their bitcoin on @webauthwallet making passive income on the gas free network @XPRNetwork @LOAN_Protocol

Magical Crypto Kingdom unite! Even BTC hoddlers can use my BitcoinSV cold storage tutorial to generate keys securely:

Got it. So instead of just worrying about the price of Bitcoin, I now have to keep my head on a swivel and worry about whether my code is random enough so my Bitcoin doesn’t get stolen!!??!? And I just watch a vid of some British Hodler telling me the only way to protect my families store of value is to put it in Larry Fink’s cookie jar (Coinbase) 🤭🤭🤭🤭😂😂😂😂

Good on you for spreading the message. If you’re reading this and think you may be affected dont fuck around.

Firmware my ass this has to been a long term inside job by cold card

@dylandotdotdot Tell people to use bitcoin core.

jack am i safe to keep my funds on strike until i get a new setup??

Yes

@jackmallers other than filing police report fbi ic3 and getting 0 reply from @Coinkite @COLDCARDwallet or @nvk what should people who were affected do?

Fun Friday night moving my BTC from a Q to elsewhere but feeling angry and ill for those who lost theirs. Kudos for helping folks @jackmallers

@jackmallers Is this effecting Trezor T ?

Not to my knowledge:

@rene44941 Ledger ok?

@rene44941 Yes, Ledger has said as much

Hi Jack, safe to move BEFORE updating the firmware?! thx

I lost all mine in a boating accident otherwise I would be panicked

Group of plebs marked safe

I rolled a casino die 100 times for a 12 Word seed on Coldcard Q, think im safe but this whole situation has gotten me nervous can you vonfirm im safe? Would you move funds regardless? (I have another hardware wallet non coldcard)

Is Ledger safe?

@sat_signal_com bro; you stole 160 million from shareholders

@sat_signal_com No I didn’t. That is FUD

@sat_signal_com damn. he was granted 12 million options. As the stock price fell below the $14.43 exercise price, the vast majority of the options ultimately became worthless I got a coldcard as a parting gift for you

How does Strike store customers Bitcoins? Do you/they have your own hardware that produces a random strong number? If not, what hardware do you use? Do you use cold card? Transparency is a must!!!!

My only disappointment is shilling strike here. Stay cold properly folks - but I see what jack meant.

@DylanLeClair Thank god for strike! Thank you Jack.

#Market is changing fast... #Opportunities are always available somewhere. If you find and grab a great #opportunity, you #win big! 👇👇👇👇👇👇 📣 Presale + 20% Airdrop: Bitcoin Pizza (PZA) on the World’s #1 FASTEST and MOST Secure Blockchain 🇺🇸🌎🔥🚀 This is a unique memecoin with 100x potential upon listing on exchanges. On May 22, 2010, Laszlo Hanyecz spent 10,000 Bitcoin (BTC), worth $30, on 2 Papa John's pizzas. That was the 1st time a digital memecoin was accepted in the real world as a currency. Now, exclusively launched on AtlantisChain — the world’s ONLY ultra-super-fast Layer-0 blockchain with 3,600,000 TPS and 0.031-second block time — Bitcoin Pizza (PZA) commemorates May 22, 2010, when Laszlo Hanyecz spent 10,000 BTC on 2 pizzas, marking the 1st real-world Bitcoin purchase. By symbolizing the most expensive pizzas, PZA, as an ATC-20 standard memecoin, empowers its holders, traders, and users with instant finality, ultra-low gas fees, and AI contract capabilities, delivering a meme-inspired digital asset worldwide. AI Contract: ACqdFh4A6M57aqHTGquQsc9vQAxLRxt4ycFpboLBsUaU 💎 Key Features 1⃣ Fastest Transaction Speed: 0.031 second 2⃣ Fixed Maximum Supply: 1 trillion PZA → No additional minting. No inflation. 3⃣ Early Presale Bonus – 20% Airdrop → All buyers in the presale receive a 20% instant bonus. 4⃣ Stake to Earn – 12% APY → Long-term holders earn 12% annually via staking. 5⃣ Creator Whitelist Access → All buyers gain whitelist access to launch ATC-20 memecoins. 💥 Presale Information 1⃣ Participants will be whitelisted for the ATC-20 memecoin launch from day one. 2⃣ Pre-own Price: 0.0000005 USDT (or 0.000000007 SOL, or 0.000000001 BNB, or 0.000000000008 BTC) per PZA 3⃣ Minimum Purchase: 300 USDT (or 4.1096 SOL, or 0.5310 BNB, or 0.0047 BTC) 4⃣ Send your payment to any of the following 4 tokens' wallets: ✅ BNB: 0x7498b8C4507eF0D0D07D6D6aaf8AfB93d13272B2 ✅ BTC: bc1qs805a4ht4e3vgsdyr7zuax0c7vn0n284uznsz4 ✅ SOL: 4EJ5bdE3i5mrfyHNwHv62CeVP79MyJzjdNHeXxx9iCeS ✅ USDT: 0x7498b8C4507eF0D0D07D6D6aaf8AfB93d13272B2 💥 How to Claim Your PZA ✅ Send email to: [email protected] (with the following information): 1⃣ Payment screenshot 2⃣ Transaction URL 3⃣ Your ATC-20 address (Register: 💥 Act NOW 🔥 First come, first served. 👉 Buy, hold, share, and grow — let your fantastic Web3 journey expand rapidly with Bitcoin Pizza (PZA) on AtlantisChain! 👍 Act NOW — Don’t miss your chance to join PZA and secure your seat to create your own ATC-20 coins for just 0.01 ATC from the very start. 💥 More Information ▶ Block Explorer: ▶ Website: ▶ Cold Wallet: ▶ ATC-20 Tokens List: ▶ exCHANGE: #BitcoinPizza #Bitcoin #Pizza #PZA #AtlantisChain #ATC20token #AtlantisEcosystem #AtlantisKingdom #AtlantisCoin #ATC #Stablecoin #UtilityCoin #SecuritiesCoin #RWAcoin #Memecoin #FoundingPioneer #CommandingGeneral #MemecoinDeveloper #CommunityBuilder #CryptoCommunity #Blockchain #Crypto #Solana #SOL #Binance #BNB #Tether #USDT #Web3 #AI

I use one seed phrase word as a password on 12 different accounts so I know I'll never forget them...👀

@DylanLeClair Multisig is fine though, as long as cold card is only 1 of the keys right?

What about the seed that was generated from 100 dice rolls that I input to the Coldcatd Q ? Is it also affected?