This Could Have Just CHANGED Bitcoin FOREVER... | Simply SatoSHE

**Sophia** (0:00)
This week, the worst-case scenario that every Bitcoiner has secretly feared in the back of their mind, the stuff of actual nightmare fuel, happened to over a thousand cold card addresses in less than 15 minutes. Roughly 600 Bitcoin and counting gone. Not from an exchange or from a phishing scam or somebody who got lazy and cut corners or trusted the wrong person, but from plebs who thought that they were doing everything right. People who bought the hardware wallet, wrote down the seed phrase, stamped it on steel, kept it offline, held their own keys, and it still wasn't enough. I need to talk about what actually happened and what this means for the community and whether this changed anything, because clearly I think that this might have changed everything. Welcome back to Satoshi.
Before I get into it, if you like the content that we make here, smash the like button, hit the subscribe, share this with every Bitcoiner you know, because this episode really matters.

**SPEAKER_2** (1:11)
There is a cold card security risk, and immediate action is required. Now, when I say immediate action, I don't mean to make you panic right now. It's not the time to panic, but you do have to move your funds right now if you are using a cold card. And so just to kind of give you the breakdown, and then I'll kind of explain what happened, and as much as we know currently, and then of course, we will give you like what we think is the best thing to do if you have the equipment, and of course, if you don't. So important, a major security vulnerability was discovered in cold card hardware while it's yesterday. For your own safety, of course, make sure you know what's going on, take the necessary actions immediately, all right? So the short of it, the TLDR, the basic breakdown of who is affected, and maybe you are is cold card, MK2s, MK3s, MK4s, MK5s, and Qs are being drained. Now, there is a bit of a caveat here from what we've seen. It's been UTXOs from 0.15 to 0.25.
So if you haven't checked your cold storage right now, and you are using a cold card from the MK2, or even all the way up to the Q, you should definitely go check out your cold storage.

**Sophia** (2:26)
Okay, so let me give you the facts as we know them right now, because there's been a lot of noise, a lot of talking on Twitter, and I just want to tell you what actually happened. Earlier today, roughly 600 Bitcoin from 1,324 single SIG UTXOs created between 2021 and 2026 were swept in about 15 minutes and mostly consolidated to one address. On-chain analysis points to flawed entropy in private key generation. Root cause is still unknown and under investigation. Some unconfirmed reports mention cold card, but nothing is proven. So, that was Grok early on pulling on chain data in real time. And at the time, it was 600 Bitcoin. Now, I think it's up to like over a thousand. And this happened in a very short time. And then cold card confirmed it and they released a statement. And yes, you heard and read that correctly. Cold card, the hardware wallet that has been the gold standard in this community for years.
The device that Bitcoin Max sees hand recommend usually. The device that so many people I personally know use, that our friends have, that people in our community have stacked their hard earned stats into and trusted completely. I wanna pause here because before we get into what went wrong technically, I think we just need to sit with what that means emotionally for a community that has already had a brutal year. For years and years and years, we thought that if we just put our Bitcoin in self-custody, laid low and we're responsible with our seed phrase, everything would be fine. So right now, this is our community's version of finding out that the bank you trusted, for example, was gambling with your money. It's basically 2008 again for some people, except in my opinion, it's worse because Bitcoiners specifically left the banks to avoid feeling this way. We did the hard work and we took on the learning curve. We bought the device, we held our own keys, and the device had this one flaw that we couldn't see.
So let's go through exactly what happened. But before I go any further, if you clicked on this video not knowing what happened and you're just finding out, I need you to stop and pay attention to this section of the video.

**SPEAKER_3** (4:58)
Guys, if you're using a cold card, transfer it to another wallet or exchange.