Pinned Tweet
The code was public for everyone to see. It was the same thing happening when you were investing in ICOs with a published SC and you got drained.
Limited Supply retweeted
We'll be at @Solana Breakpoint in London with the @SuperteamBLKN crew.
Still need a ticket? We've got 25% off for you 👇
luma.com/breakpoint2026?coup…
Share your Breakpoint plans below!
Limited Supply retweeted
Your browser is safe from the eMudhra cert fiasco. Your trading bot probably isn't.
8 CA certificates with private keys as small as "4" can mint a valid cert for ANY domain: your RPC, your exchange API, your wallet backend.
Chrome, Firefox, Apple, MS blocked them within hours. Node.js still hasn't.
Limited Supply retweeted
Right now, 30,000+ objects are racing around Earth at 17,500 mph — satellites, rockets, debris.
We built a live map of all of it. 🛰️
Launches, re-entries, close approaches & space weather — the moment they happen.
→ orbitalradar.com
#Space #Satellites #Starlink
Limited Supply retweeted
1000 Worlds. Official info.
CA: none yet.
Mint: not live.
No Telegram. No Discord.
Our holders will not end up as "community".
This account is the only source.
If it's not here, it's not real.
Pushed arc-anoid.lol
A full onchain game on @arc
Deployed on @minarafun
Play to earn ARK.
My honest work for the Arc chain.
Verify.
0x7f3fb06b16dad82d770587a58d0b435bd4837c33
Limited Supply retweeted
Somebody paid 80 cents to write eight words into the Bitcoin blockchain:
"we are whitehats. contact us on chain."
Four hours earlier they had walked out of Liquid with 3,998 BTC. $320 million. 95% of everything in the vault.
They didn't steal a key. They didn't break the 11-of-15 federation. What happened next has no precedent.
We made a 6-minute film about it. 📺
Limited Supply retweeted
Solana Summit Serbia was a blast! i’m travelling back home more bullish than ever. thank you, Solana family! thank you my Balkan brothers!
Limited Supply retweeted
Belgrade was unforgettable! 🇷🇴🤝🇷🇸
Massive congratulations and a huge thank you to @SuperteamBLKN for hosting an incredible Solana Summit. The @solana_ro crew had a blast connecting with top-tier builders.
Balkans are leveling up fast. What comes next might surprise you🇷🇴🫡
Limited Supply retweeted
Big business over Belgrade skyline views.
Incredible afternoon at Kod Deda for the Solana Romania Big Biznis Lunch, powered by @SuperteamBLKN
When you put hungry builders in the same room, high-conviction moves happen. Onwards ⚡️🇷🇸🫡🇷🇴 – at Belgrade, Republic of Serbia
RANDSTORM, MILK SAD, Android SecureRandom, Profanity, Trust Wallet Destop Extension
Do those ring any bells?
Just add CC to the list and wait. You will forget and it will happen again.
Limited Supply retweeted
I’m sorry, but it needs to be said: the dice thing is retarded. Not just because it’s shitty UX, either.
Objectively, a correctly functioning and implemented cryptographic TRNG is a MUCH better entropy generator than asking a typical user to perform and encode 100 - or any number - of dice rolls.
You can have imperfect or deliberately biased dice, a rolling surface that produces correlations, recording the wrong face, omitting or duplicating a roll, consciously or unconsciously rerolling unusual runs, exposing the written roll sequence, using an incorrect base-6 conversion, introducing modulo bias, entering fewer rolls than believed… etc.
A TRNG can generate far more raw entropy, much faster, with less procedural error.
The ONLY thing the dice roll is a hedge against is an incorrectly implemented TRNG - ie the exact flaw that the cold card had.
But if you accept that you need a hedge against HWW entropy generation, then you need to ALSO accept that the procedure with which the wallet converts the dice roll into a seed is equally as likely to be flawed or malicious as the TRNG implementation.
So your hedge against the wallet malfunctioning is only a partial hedge of one part of the failure mode; you are still vulnerable to any and all other possible flaws that the wallet might have.
The only thing that can hedge against all possible flaws that a wallet might have is multi-vendor multi-sig.
In this case, the dice would have protected you, but there are myriad other possible failure modes in which the dice would not have protected you -so either you implement multi-sig, in which case rolling dice is redundant, or you don’t, in which case there’s still multiple failure modes that you are exposed to, and no possible way to control for them all. Like the coldcard itself, it provides only the illusion of security.
Similarly, a passphrase can either be remembered - in which case it is insufficiently high entropy to matter - or it needs to be written down, in which case IT MIGHT AS WELL BE ANOTHER SEED AND ATORED STORED ON ANOTHER DEVICE.
After taking some time to look at the CC code, my humble opinion is that you can easily break the mk3 if the user did NOT set a good password (over 6 ch) and you can break mk4/5/q if you knownthe UID range of the devices and users did NOT set a strong password. It takes some time and resources for mk4 and above but it is doable in 6-12 months.
If you set a strong password you are safe even with mk2/3 ( but sweep funds to be 100% safe).
If mk4/5/q drain happens, the uids are known.
Even when the code was public, the devs could not find the bug for 5 years. Imagine the power of probability models and what you can build.
There are no devs
Limited Supply retweeted
Coldcard MK3, MK4, MK5 and Q are being drained. A bug lets attackers find your seed phrase without any action on your part. Only wallets generated using the dice roll method are safe, assuming you rolled at least 50 dice. If you don’t know, don’t remember, or aren’t sure, move your funds immediately.


















