pull down to refresh

6 sats \ 6 replies \ @denlillaapan 1 Aug \ on: Coldcard Sweep Watch bitcoin

Stupid, basic question: how do we/they know which tx are from coldcards...?

There a specific marker in some transactions of the thief?

write
compose
1 sat \ 5 replies \ @HardMoney OP 1 Aug

I think the attacker is just grinding out low entropy deterministic seeds from the bad RNG but and then scanning to see if there are any funds there.

Potentially when someone spends to the mempool it might flag a UTXO as being a target to look at too. Idk all the technical specifics tho

reply
1 sat \ 4 replies \ @denlillaapan 1 Aug
I think the attacker is just grinding out low entropy deterministic seeds from the bad RNG but and then scanning to see if there are any funds there

Yes, that much I gather. How do we know which transactions are that? (Such that we can arrive at the number 1131 BTC or whatever and show them publicly?)

reply
1 sat \ 3 replies \ @HardMoney OP 1 Aug

where funds were swept to. Number is a minimum floor estimate. Likely more

https://coldcard-watch.vercel.app/methodology.html

reply
6 sats \ 2 replies \ @denlillaapan 1 Aug

Aha, so basically attacker "revealed" himself by consolidating...?

reply
123 sats \ 0 replies \ @HardMoney OP 1 Aug

yea, I think there’s a ton of individual attackers now tho too since anyone with compute can do it

reply
40 sats \ 0 replies \ @Scoresby 1 Aug

Here is from the methodology section of the website.

If anything, I think they may be undercounting.

reply