The Coldcard exploit announcement needs to be pinned or created

[NotATether]

In the past few hours, there has been a large-scale theft of hundreds of users' funds which were being held in Coldcard hardware wallets, especially Mk2 and Mk3.

It seems like this is a firmware vulnerability and not any user error on their part.

I think Bitcointalk needs to create another Important Announcement for the Coldcard users to transfer their funds elsewhere immediately before more people get robbed.

Maybe a pin would also work, but I'm strongly leaning towards the former idea

[Upgrade00]

It can be highlighted in the news section above where bitcoin core releases are updated and maybe with a warning colour to bring attention to it. Most people are already used to what is displayed there that they may instinctively not read it, but if it's in a light red colour they would. Would disturb the aesthetics a little, but if it saves one person would be worth it.
 

[NotATether]

It can be highlighted in the news section above where bitcoin core releases are updated and maybe with a warning colour to bring attention to it. Most people are already used to what is displayed there that they may instinctively not read it, but if it's in a light red colour they would. Would disturb the aesthetics a little, but if it saves one person would be worth it.

Sounds good. I'm sure many people would rather have slightly irritated eyes than lose 1BTC+ to hackers.

[Hypnotizer]

Sounds good. I'm sure many people would rather have slightly irritated eyes than lose 1BTC+ to hackers.

Well it has been done by the moderators ✔️

Just saw the news this morning and I’m getting to know more about the exploit but it’s honestly very sad. My big condolences to the users that have loss their funds from this.

[theymos]

Good idea, thanks. A lot of users have email notifications enabled for the Important Announcements board, so that's a good way to reach people about a device released ~7 years ago.

[TokenTikas]

Thank you, NotATether, for making an announcement of such important news here immediately. Administrator theymos noticed your post very recently and added it to the top of the forum homepage. I suddenly came to know about the Coldcard exploit after seeing the news headline at the top.

Because it has been made a headline at the top of the forum homepage, users will see it as soon as they come to the forum and will be able to be informed about this matter. Even if the users have made no mistake, it still feels disappointing when we see this kind of activity where bitcoin is lost, because the users lose the money they earned through their hard work.

[NotATether]

Good idea, thanks. A lot of users have email notifications enabled for the Important Announcements board, so that's a good way to reach people about a device released ~7 years ago.

Thank you theymos

One small correction

It seems that Mk2 wallets have the same vulnerability as Mk3 as well

Here's the full list of vulnerable devices and their firmware versions.



Note that there is a firmware patch for Mk4, Q, and Mk5. For Mk3 and Mk2, there is no patch, so they must transfer funds out to a more secure seed phrase.