New Here.... My Coldcard got caught in the mess.

[Pakistani Shaheen]

I am new here, I have been using crypto for a few years already. I understand how wallets work like private keys, seed phrases, onchain transactions and many other things like that, but I am still a human and can make mistakes sometimes.

I have a big loss in Coldcard situation because it actually affected me directly. I have read many articles about that and some topics here too. I have seen some discussions here about it already and I am glad people are talking about it seriously. I just signup yesterday and now posting here and when I signed up I saw that news on top and I am impressed because that was quick update. I lost much in that incident and I can't express in my words. But I have some questions like if I will move on so which wallet I should use?

I also wanted to ask, is there any local language section on this forum? For Urdu or South Asian users maybe? I will ask questions frequently maybe they will answer well, and I understand well.

[FinneysTrueVision]

There is a thread for Pakistan pinned at the top of the Other languages/locations section.

There are several good hardware wallet options like Trezor, BitBox, SeedSigner, Blockstream Jade, Foundation Passport and a few others. You can also use wallets from multiple vendors if you prefer multisig over single signature. You might want to do research on different air-gapped setups also.

[Myleschetty]

Welcome on board. I sincerely apologize for your loss.
All of the wallets mentioned above, in my opinion, are good, but you must make sure to use the official website whenever you want to purchase one. If you don't want to spend money on a hardware wallet because of your experience, you can use an Electrum wallet, download and verify it, create it using Air Gap, and backup the wallet seeds in a different secure location (don't use paper for long-term storage though).

[BlackBoss_]

I am new here, I have been using crypto for a few years already. I understand how wallets work like private keys, seed phrases, onchain transactions and many other things like that, but I am still a human and can make mistakes sometimes.

I have a big loss in Coldcard situation because it actually affected me directly. I have read many articles about that and some topics here too. I have seen some discussions here about it already and I am glad people are talking about it seriously. I just signup yesterday and now posting here and when I signed up I saw that news on top and I am impressed because that was quick update. I lost much in that incident and I can't express in my words.

Hopefully your story is a true one, not a fabricated story.
If your story and loss are true, it's bad to know that and wish you strong mentality during these days as well as ability to recover.

There was a user with a fake story.
Coldcardvictim.
The fake story that was deleted.
 

But I have some questions like if I will move on so which wallet I should use?

Bitcoin Core if you want to run a node (either full node or prune node).
Electrum if you have little disk space for storage.
Trezor if you want to use a hardware wallet.

Consider to use a passphrase (custom words) for better wallet security.

[Pakistani Shaheen]

There is a thread for Pakistan pinned at the top of the Other languages/locations section.

Thank you very much I found that.

Hopefully your story is a true one, not a fabricated story.
If your story and loss are true, it's bad to know that and wish you strong mentality during these days as well as ability to recover.

There was a user with a fake story.
Coldcardvictim.
The fake story that was deleted.

🤔🤔🤔

Fake story. I don't know if his/her story is fake or fabricated. By the way, I have a question again, why did he/she make a fake story? Do people give compensation here, or funding, or something else?

​I did not make a big story like that. I know that was my bad luck, so why should I cry to everyone? I expressed it in few words and asked questions to move on.

​
​Thank you very much to all who suggested. I think I should wait for more suggestions.

[Filicius]

Fake story. I don't know if his/her story is fake or fabricated. By the way, I have a question again, why did he/she make a fake story? Do people give compensation here, or funding, or something else?

No, there isn't, but some users must think that if they give enough grief with a made-up story, some charitable soul will take pity on their situation and compensate them financially for the alleged losses.

It is not the philosophy of this forum, as far as I know, that instead of direct help it is rather a means for learning and self-growth. Self-custody carries risk, reward, and responsibility. Whoever does not develop the latter will have problems, so it is for their own good.

[348Judah]

This is not even about fake story or not on this regard, we are mostly concerned about those that are seriously affected by the incidence of coldcards hack I lost their fortune to this kind of attack, now OP,  if you are more interested in getting to a local board that align with the language you speak well, there is a localized section you will see if you are on the homepage and you scroll down towards other languages, you will discover a number of them and choose between which you belong.

[nc50lc]

There was a user with a fake story.

Fake story. I don't know if his/her story is fake or fabricated. By the way, I have a question again, why did he/she make a fake story? Do people give compensation here, or funding, or something else?

His post contains a bitcoin address, but that's the attacker's consolidation address so it can't be an trick to earn bitcoins through donations.
At least not in the original post.

Rather, I'm thinking that he may be aiming to earn "merits" instead.
Users need that to upgrade their account's rank and the 119 merit that he earned in that post was already enough to reach Full Member rank with enough activity.

There's also a possibility that it's just AI-assisted translation or grammar fix which can be detected as AI-generated.
But the owner didn't bother defending himself.

[Pakistani Shaheen]

There was a user with a fake story.

Fake story. I don't know if his/her story is fake or fabricated. By the way, I have a question again, why did he/she make a fake story? Do people give compensation here, or funding, or something else?

His post contains a bitcoin address, but that's the attacker's consolidation address so it can't be an trick to earn bitcoins through donations.
At least not in the original post.

Rather, I'm thinking that he may be aiming to earn "merits" instead.
Users need that to upgrade their account's rank and the 119 merit that he earned in that post was already enough to reach Full Member rank with enough activity.

There's also a possibility that it's just AI-assisted translation or grammar fix which can be detected as AI-generated.
But the owner didn't bother defending himself.

Ah, I see. I actually just recently learned about how the Merit system works here. A member from the local section was explaining it to me earlier, so it makes sense now, he was basically farming merits through sympathy.

​Since I was not clear on the whole merit concept, I figured I would just ask here directly. Hahaha, sorry if I ended up bothering you with basic questions, but I got all the answers I needed. Really impressed with how helpful everyone is around here. Thanks a lot for taking the time to clarify that for me.

[satscraper]

But I have some questions like if I will move on so which wallet I should use?

Does it imply you still own Bitcoin that remained after the theft from your Coldcard?

Anyway, if you want to move forward ^{whatever that means} you might want to consider the multisig setup with quorum of cosigners that would secure your stash if any of your cosigners were compromised somehow.

 The simplest multisig setup is ^{2-of-2, example here} which can be easily extended to 2-of-3 or even more complicated multisig scheme.

[Pakistani Shaheen]

Does it imply you still own Bitcoin that remained after the theft from your Coldcard?

Anyway, if you want to move forward ^{whatever that means} you might want to consider the multisig setup with quorum of cosigners that would secure your stash if any of your cosigners were compromised somehow.

 The simplest multisig setup is ^{2-of-2, example here} which can be easily extended to 2-of-3 or even more complicated multisig scheme.

I do not have any left at the moment, but I DCA regularly to build up my stack again. That is why I was asking this for the future.

Thanks for the suggestion. Multisig looking solid, but I am also thinking of splitting my holdings across different wallets as well. I think spreading the risk like that would be a good approach for me. And I think that was a big mistake that I keep them in one wallet.

[Coyster]

I have a big loss in Coldcard situation because it actually affected me directly.

How much did you exactly lose in this Coldcard hack?

I am new here, I have been using crypto for a few years already. I understand how wallets work like private keys, seed phrases, onchain transactions and many other things like that, but I am still a human and can make mistakes sometimes.

What mistake are you talking about here? The Coldcard incident was not the fault of any of the victims, they all did what was right by storing their assets in cold storage. The mistake was on the part of Coinkite and their bloody developers who made a terrible coding mistake that has set many people thousands of steps backward in their financial lives.

[Pakistani Shaheen]

I have a big loss in Coldcard situation because it actually affected me directly.

How much did you exactly lose in this Coldcard hack?

I am new here, I have been using crypto for a few years already. I understand how wallets work like private keys, seed phrases, onchain transactions and many other things like that, but I am still a human and can make mistakes sometimes.

What mistake are you talking about here? The Coldcard incident was not the fault of any of the victims, they all did what was right by storing their assets in cold storage. The mistake was on the part of Coinkite and their bloody developers who made a terrible coding mistake that has set many people thousands of steps backward in their financial lives.

​I'd rather not share the exact amount for privacy and security reasons, but it was basically my entire savings, so it was a huge blow to me.

Also, just to clarify, when I mentioned making mistakes, I was referring to posting on this forum since I am still new here. I know using Coldcard was not a mistake on my end, it was just terrible luck. On the bright side, this whole situation made me realize that I should definitely split my holdings across multiple wallets moving forward.

[Coyster]

I'd rather not share the exact amount for privacy and security reasons, but it was basically my entire savings, so it was a huge blow to me.

I didn't ask you to share your wallet address or the transaction ID of your funds leaving your wallet. There is no privacy or security risk in posting how much in bitcoin you lost to this hack.

On the bright side, this whole situation made me realize that I should definitely split my holdings across multiple wallets moving forward.

This is not something that someone who just lost a huge amount of money (their entire savings) would normally say.

[Ethan151]

That’s a really painful experience. I think the important thing now is learning from what happened and improving the security of the remaining funds. The discussion about multisig is especially interesting, since spreading the risk can be a good approach for larger holdings.

[9ja Amaka]

I am new here, I have been using crypto for a few years already. I understand how wallets work like private keys, seed phrases, onchain transactions and many other things like that, but I am still a human and can make mistakes sometimes.

Welcome.

I have a big loss in Coldcard situation because it actually affected me directly. I have read many articles about that and some topics here too. I have seen some discussions here about it already and I am glad people are talking about it seriously. I just signup yesterday and now posting here and when I signed up I saw that news on top and I am impressed because that was quick update. I lost much in that incident and I can't express in my words. But I have some questions like if I will move on so which wallet I should use?

I am trying to figure out whether your story is true or a completely made-up story to get sympathy from forum members. Regardless, you said something that touched my heart. I wonder how people affected by the Coldcard situation are coping right now. I wouldn't want to be in that situation. If your story is true, do not think about the loss much. You will surely recover them.

This is the part where you think of what wallet is best for you. Therefore, you can consider using a non-custodial + software wallet instead of a hardware wallet that gave you a bad experience. I recommended the Electrum wallet because it is open source. Bluewallet is actually nice too.

[TokenTikas]

Fake story. I don't know if his/her story is fake or fabricated. By the way, I have a question again, why did he/she make a fake story? Do people give compensation here, or funding, or something else?

There is a lot to be said about exaggerating but the post (OP) made is not asking for any financial help, so there is no need to exaggerate it like this. He has raised the matter of the loss according to his personal opinion but if the matter is really true then it is unfortunate.

The matter of wanting to turn around from that broken-down situation is good and at the same time he is asking about what type of wallet would be safe for him to use. According to what he wants to know, it does not seem that he is telling any made-up story. If he can use a small amount of money to buy a hardware wallet then that would be good. In all situations, we have to be careful in the crypto world so that we do not become victims of fraud in any way.

[Sticky Bomb]

This is the part where you think of what wallet is best for you. Therefore, you can consider using a non-custodial + software wallet instead of a hardware wallet that gave you a bad experience. I recommended the Electrum wallet because it is open source. Bluewallet is actually nice too.

To add to this, he should try to use it offline and in an air-gapped device, using passphrase would increase the security of his keys as well. He should make more than one backup and store the passphrase and seed phrase in different locations.

The best security is never to have your private keys go online, cold storage remains the best practice.

Those that were caught up in this ColdCard saga were not wrong for using a hardware wallet, they were only unfortunate to be victims of circumstance. I really feel sorry for them.