Will crypto ever gain widespread adoption with constant news like this?

Or, given that previous hacks and losses didn't affect the price from shooting up to new highs, is this the perfect time to buy?

The Bitcoin communities seem to really be struggling with this hack. The people losing their coins in this case were following best practices. Typically when someone loses their coins there’s a big pile-on to victim blame them for making some mistake. I think it’s comforting to others to be able to identify a mistake someone else made and then convince yourself that you’re too smart to make the same mistake.

In this case, there isn’t much of a mistake to point out. I’ve seen a couple attempts from people trying the told-you-so routine using some arguments about multisig wallets as the only option, but mostly it looks like people are panicking and wondering if their choice of wallet has some undiscovered vulnerability waiting to be exploited. I mostly try to stay away from Bitcoin communities but in events like this it spills over everywhere. I feel sorry for anyone who lost coins, of course, but it’s also interesting to watch the communities grapple with reconciling their appreciation for irreversible key-based transactions with the realities of how this works when their money is on the line. The old ideas about having perfect OPSEC and being smarter than the other coiners are starting to get weakened with examples like this.

My guess is that the next phase is to revise history and form a consensus that Coldcard was never a recommended wallet and that it was obvious to everyone with good OPSEC at the time.

> Perhaps the most compelling forensic observation is that the first vulnerable firmware was released on March 17th, 2021. From that date onward, we see stolen coins beginning to pour into the few shared addresses used by the attacker.

this is an inexcusable slop-y error that made me press close on the tab.

While no one knows if there might have have been earlier exploitation, the new exploitation just started and did not extend back to the vulnerable firmware release.

The root cause seems to be known, unlike what this article implies. A bunch of other articles discuss the entropy issue, https://insider.btcpp.dev/p/when-randombytes-runs-but-doesnt for one I found quickly.

Interesting topic, but I don’t like this writing style. It’s a lot of words to say very little and repeats sentence structure often. The author assumes the reader knows about this hack already, and doesn’t not provide context on what it is, or details like why the attacker is storing coins in 4,000+ wallets.

This is the best technical analysis I have seen, so far.

https://insider.btcpp.dev/p/when-randombytes-runs-but-doesnt

It doesn't appear that Coinkite, the company behind ColdCard products, had mature senior engineers in the loop. At least, no engineers who could flag such sloppy (and ongoing to this day) code commit practices.