Coldkey shennigans are happening

[MoparMiningLLC]

In May of 2023 I was at the Bitcoin conference in Miami, I was also up late that night wiating for the block that would release the 2nd card of the timelocks. I also had numerous other people's 2023 timelocks. Today, I opened that wallet for no real reason and was surprised to see one of the wallets had received funding in Feb of 2025 - in the amount of 10k sats. In looking at the transaction - there were 37 addresses that received funding - 35 of them received 10k sats, one received 142k sats and one received 312.5k sats -- all 37 of these wallets are still holding their funds.

The one catch is the funds were sent to the legacy address for that cards private key. As we all know, Yogg used segwit addresses. So scanning your card will not show these balances.

I suggest everyone who still has their cards to scan their keys again. You will need to scan the private keys with a wallet that can check all variations of the key for the segwit/legacy/multisig addresses.

if you want to use electrum, be sure to add the prepend before the key - for legacy that is: p2pkh:<private key> for the multisig address (begins with 3) you prepend with p2wpkh-p2sh   and for the segwit (begins with bc1) you would prepend with p2wpkh

and the more I think about it, with electrum you might be able to skip the prepend and just load the pk - legacy might be the default - I have always just loaded each pk with all 3 prepends so as to load all 3 address types.

the transaction is: 3dcc8c60971a334b5850e5134b4a7d7a2ea86522dc6ef8e968106011c0102022

[Mitchell]

That is really odd.

[MoparMiningLLC]

That is really odd.

agreed. why would anyone fund a compromised card? unless it is a fluke and someone randomly deposited 10k sats to an address - 30 some odd ones at that. The only reason I saw it was that I loaded all 3 prepends for the cards keys. address watching on the cards addresses alone would not have shown this.

I cannot share the keys here - partially because it is not mine but also because maybe they will do more in the future? is Patrick trying to pay back? who knows.... I doubt that as well.

But I will confirm that the legacy address I can see as funded did belong to the same key as a timelocked coldkey address that I can match to a physical card.

[Mitchell]

Any idea if this is only for the timelock ones or is it worth it to check regular cards as well?

[MoparMiningLLC]

Any idea if this is only for the timelock ones or is it worth it to check regular cards as well?

it could be any card, the only one that I have loaded is a time locked card - this was because I was travelling and trying to sweep before he did. With my other cards I used a ballet wallet and just scanned all keys - ballet will check all 3 automatically - I will be scanning the rest of my keys later tonight via the ballet app.

if any of my other cards are among the 30 someodd addresses, I will update here.

[bitcoiner24h]

Any idea if this is only for the timelock ones or is it worth it to check regular cards as well?

it could be any card, the only one that I have loaded is a time locked card - this was because I was travelling and trying to sweep before he did. With my other cards I used a ballet wallet and just scanned all keys - ballet will check all 3 automatically - I will be scanning the rest of my keys later tonight via the ballet app.

if any of my other cards are among the 30 someodd addresses, I will update here.

Good info, thanks. Honestly, I was really tempted to burn those cards in my fireplace, and I don’t know why I didn’t. I’ll take another look at them.

[ChiBitCTy]

Wtf

(Btw mopar I swear ima reach out one day. I’ve just nearly completely lost my love for the hobby. Partly due to bn scammed by friends and cn so many scams, and in part that a good % of newer collectors are fn idiots. I’m glad you’re still very active, makes me feel better as I know you’re looking out for the better good of the community at all times, a rarity in my decade here. Cheers bud).

[MoparMiningLLC]

I am going no where Chi

I still have not had time to drag out my cards to rescan all the keys to check their legacy addresses - been getting ready for Vegas - maybe once I get back.

[Cryptogreatdane]

A remorseful Yogg? Or an anonymous do gooder? Very cool

[aoluain]

This has to be a first!

but its really messed up.

[MoparMiningLLC]

another possibility is random dusting but it seems odd that someone would dust the legacy address to a coldkey when that address has had no other other activity as it was not in some prior transaction (the legacy address that is)

[cygan]

how exactly do i go about reading the legacy address from the cryptobonds cards?
i still have some cryptobonds here and would like to know if they are still loaded or not...

[MoparMiningLLC]

how exactly do i go about reading the legacy address from the cryptobonds cards?
i still have some cryptobonds here and would like to know if they are still loaded or not...

you just have to load the private keys - an easy way is using ballet which will check all addresses associated with at pk

[cygan]

✂️
you just have to load the private keys - an easy way is using ballet which will check all addresses associated with at pk

so i have to remove the hologram on the cryptobonds cards anyway to be able to check it and then scan the qr-code with the ballet app, right?

[MoparMiningLLC]

✂️
you just have to load the private keys - an easy way is using ballet which will check all addresses associated with at pk

so i have to remove the hologram on the cryptobonds cards anyway to be able to check it and then scan the qr-code with the ballet app, right?

yes you would need to scan the Private key itself - so far, I have only been able to tie one of the legacy addresses to an actual coldkey private key that was at one point used to fund a segwit address that is on the card. I do not know or have proof that all the addresses are tied to other coldkeys - only putting the info out so people can check their keys if they still have them.

[DaveF]

Tinfoil hat conspiracy theory:

When the cards were made he also generated a bunch of legacy addresses for some other reason with the same keys.
Was planning on a 2nd round of scamming by having those addresses also get funded from some other project.
This way when the PKs were "compromised" all could be swept.

Now, the question is why did they get funded now? The other scam is now progressing and he is starting to fund them to sweep later.
Sell 500 of something funded @ $10 each. But only fund the 1st 50 or so. Take everyone's money for the full 500 and then sweep the 1st 50.

But that's real paranoid bizzare thinking on my part. Other then that I got nothing.

-Dave

[MoparMiningLLC]

Tinfoil hat conspiracy theory:

When the cards were made he also generated a bunch of legacy addresses for some other reason with the same keys.
Was planning on a 2nd round of scamming by having those addresses also get funded from some other project.
This way when the PKs were "compromised" all could be swept.

Now, the question is why did they get funded now? The other scam is now progressing and he is starting to fund them to sweep later.
Sell 500 of something funded @ $10 each. But only fund the 1st 50 or so. Take everyone's money for the full 500 and then sweep the 1st 50.

But that's real paranoid bizzare thinking on my part. Other then that I got nothing.

-Dave

the only issue would be if someone properly loaded the keys then they would see the balance incoming like I did. so yes it is very weird - either that or it a total random dusting but I find that harder to believe.