pull down to refresh
Part of me feels like this person either wants to teach people a lesson not to trust any commercial hardware wallets, or this is a setup to create FUD to scare people away from self-custody their Bitcoin.
if you want to teach people a lesson, you take 1 utxo, not drain. And do a press release.
Instead, the pattern suggests malice (even though we should not assign malice first) combined with some incompetence. You could be right though.
anyhow, the FUD is def there now.
yes, we're quick to fall back into familiar patterns of bullshit while for others their world is smoldering, we didn't address any root causes and we have no plan for the future.
I read some posts that keep saying those using cold cards are doing everything right, yet the coins are still being drained. To be honest, trusting a commercial hardware wallet / depending on others isn't doing things right to begin with.
I feel many people are in panic mode now and not sure whether they should still self-custody their coins.
To be honest, trusting a commercial hardware wallet / depending on others isn't doing things right to begin with.
Key word trust. I made this mistake myself. Because despite reviewing this exact software, I was assuming/trusting that there would be other, smarter, people also looking at it and finding different things. That didn't cover this case.
Bottom line, having a shitton of influencers recommend something and no one finding this and saying "hold up" is also a failure. It is a secondary failure but if anything, this episode is showing how screwed we are.
It is pretty rough that none of us managed to spot this before it was exploited.
I like to think that if I had really serious amounts of Bitcoin to secure, I'd pay some auditor to examine all the pieces of my stack. The reality seems to be as you say that we were all content to trust that someone else was doing that checking. That's bad.
For myself, I am realizing I need to get much more serious about using the tools to check on the tools I use.
I agree. I think it's just uncomfortable to say the victims did something wrong, even though that's obviously true.
It's more like, they tried to do the right things but didn't check all of the many complicated boxes and ended up getting got.
Part of me feels like this person either wants to teach people a lesson
Same feeling
Maybe off-topic, but I'm curious how this person could make sure he or she won't get caught when try to use the stolen coins in the future, since it's a large amount and all eyes are on it? Knowing everything is linked and transparent...