Limited Supply (@concorde81) header
Limited Supply (@concorde81) profile picture

Be your own bank

Bitcoin Network Resident
Joined October 2011
Photo by Limited Supply (@concorde81)Photo by Limited Supply (@concorde81)Photo by Limited Supply (@concorde81)Photo by Limited Supply (@concorde81)Photo by Limited Supply (@concorde81)Photo by Limited Supply (@concorde81)Photo by Limited Supply (@concorde81)Photo by Limited Supply (@concorde81)Photo by Limited Supply (@concorde81)Photo by Limited Supply (@concorde81)
The code was public for everyone to see. It was the same thing happening when you were investing in ICOs with a published SC and you got drained.
2
236
Limited Supply retweeted
We'll be at @Solana Breakpoint in London with the @SuperteamBLKN crew. Still need a ticket? We've got 25% off for you 👇 luma.com/breakpoint2026?coup… Share your Breakpoint plans below!
5
3
10
205
Limited Supply retweeted
Your browser is safe from the eMudhra cert fiasco. Your trading bot probably isn't. 8 CA certificates with private keys as small as "4" can mint a valid cert for ANY domain: your RPC, your exchange API, your wallet backend. Chrome, Firefox, Apple, MS blocked them within hours. Node.js still hasn't.
1
1
2
303
Limited Supply retweeted
Right now, 30,000+ objects are racing around Earth at 17,500 mph — satellites, rockets, debris. We built a live map of all of it. 🛰️ Launches, re-entries, close approaches & space weather — the moment they happen. → orbitalradar.com #Space #Satellites #Starlink
5
7
1
17
996
Limited Supply retweeted
honey, wake up new 3D game made by romanians just dropped
3D. MULTIPLAYER. WL ONLY. STILL TESTING. FIND BUGZ.
3
2
8
279
AI is the technology that will release humans from screens.
1
1
91
Limited Supply retweeted
1000 Worlds. Official info. CA: none yet. Mint: not live. No Telegram. No Discord. Our holders will not end up as "community". This account is the only source. If it's not here, it's not real.
1
2
6
208
Pushed arc-anoid.lol A full onchain game on @arc Deployed on @minarafun Play to earn ARK. My honest work for the Arc chain. Verify. 0x7f3fb06b16dad82d770587a58d0b435bd4837c33
3
209
Limited Supply retweeted
Somebody paid 80 cents to write eight words into the Bitcoin blockchain: "we are whitehats. contact us on chain." Four hours earlier they had walked out of Liquid with 3,998 BTC. $320 million. 95% of everything in the vault. They didn't steal a key. They didn't break the 11-of-15 federation. What happened next has no precedent. We made a 6-minute film about it. 📺
24
113
10
517
53,473
Limited Supply retweeted
WE GOT BUGGED. WE LEAKED. QUESTIONS?
12
11
1
40
2,981
Limited Supply retweeted
Solana Summit Serbia was a blast! i’m travelling back home more bullish than ever. thank you, Solana family! thank you my Balkan brothers!
8
2
66
1,127
Limited Supply retweeted
Belgrade was unforgettable! 🇷🇴🤝🇷🇸 Massive congratulations and a huge thank you to @SuperteamBLKN for hosting an incredible Solana Summit. The @solana_ro crew had a blast connecting with top-tier builders. Balkans are leveling up fast. What comes next might surprise you🇷🇴🫡
1
5
37
955
Limited Supply retweeted
Big business over Belgrade skyline views. Incredible afternoon at Kod Deda for the Solana Romania Big Biznis Lunch, powered by @SuperteamBLKN When you put hungry builders in the same room, high-conviction moves happen. Onwards ⚡️🇷🇸🫡🇷🇴 – at Belgrade, Republic of Serbia
10
7
1
56
1,713
RANDSTORM, MILK SAD, Android SecureRandom, Profanity, Trust Wallet Destop Extension Do those ring any bells? Just add CC to the list and wait. You will forget and it will happen again.
1
2
160
Limited Supply retweeted
I’m sorry, but it needs to be said: the dice thing is retarded. Not just because it’s shitty UX, either. Objectively, a correctly functioning and implemented cryptographic TRNG is a MUCH better entropy generator than asking a typical user to perform and encode 100 - or any number - of dice rolls. You can have imperfect or deliberately biased dice, a rolling surface that produces correlations, recording the wrong face, omitting or duplicating a roll, consciously or unconsciously rerolling unusual runs, exposing the written roll sequence, using an incorrect base-6 conversion, introducing modulo bias, entering fewer rolls than believed… etc. A TRNG can generate far more raw entropy, much faster, with less procedural error. The ONLY thing the dice roll is a hedge against is an incorrectly implemented TRNG - ie the exact flaw that the cold card had. But if you accept that you need a hedge against HWW entropy generation, then you need to ALSO accept that the procedure with which the wallet converts the dice roll into a seed is equally as likely to be flawed or malicious as the TRNG implementation. So your hedge against the wallet malfunctioning is only a partial hedge of one part of the failure mode; you are still vulnerable to any and all other possible flaws that the wallet might have. The only thing that can hedge against all possible flaws that a wallet might have is multi-vendor multi-sig. In this case, the dice would have protected you, but there are myriad other possible failure modes in which the dice would not have protected you -so either you implement multi-sig, in which case rolling dice is redundant, or you don’t, in which case there’s still multiple failure modes that you are exposed to, and no possible way to control for them all. Like the coldcard itself, it provides only the illusion of security. Similarly, a passphrase can either be remembered - in which case it is insufficiently high entropy to matter - or it needs to be written down, in which case IT MIGHT AS WELL BE ANOTHER SEED AND ATORED STORED ON ANOTHER DEVICE.
74
12
13
227
44,510
After taking some time to look at the CC code, my humble opinion is that you can easily break the mk3 if the user did NOT set a good password (over 6 ch) and you can break mk4/5/q if you knownthe UID range of the devices and users did NOT set a strong password. It takes some time and resources for mk4 and above but it is doable in 6-12 months. If you set a strong password you are safe even with mk2/3 ( but sweep funds to be 100% safe). If mk4/5/q drain happens, the uids are known.
1
150
Even when the code was public, the devs could not find the bug for 5 years. Imagine the power of probability models and what you can build. There are no devs
83
Limited Supply retweeted
Coldcard MK3, MK4, MK5 and Q are being drained. A bug lets attackers find your seed phrase without any action on your part. Only wallets generated using the dice roll method are safe, assuming you rolled at least 50 dice. If you don’t know, don’t remember, or aren’t sure, move your funds immediately.
15
61
6
151
36,481