Coldcard Users Hit by RNG Vulnerability Urged to Take Immediate Action

Bitcoin advocate Samson Mow has outlined five immediate actions for users affected by the Coldcard wallet losses following the disclosure of a random number generator vulnerability. The COLDCARD RNG vulnerability may be worse than an exchange hack, according to Mow.

Mow urged victims to document every detail related to affected wallets, including wallet addresses, dates, firmware versions, transaction details, and any other information that could help create a detailed record of the incident. He also encouraged victims to file a police report because it would create an official record.

Mow recommended contacting cybercrime units, national reporting portals such as the FBI's Internet Crime Complaint Center, or specialized cryptocurrency crime task forces when available. Affected users should watch for coordinated efforts to track movements of stolen funds and preserve the affected Coldcard device and seed phrase instead of destroying them after the theft.

Mow warned victims against recovery scammers, cautioning never to share personal details or seed phrases, or send money to individuals claiming they can retrieve stolen cryptocurrency. He argued that self-custody is hard and emphasized the importance of reducing single points of failure in bitcoin self-custody by using hardware from multiple vendors in a multisignature setup.