I feel a deep sympathy for anyone who lost money in Coldcard exploit. I cant begin to imagine the physical pain I would be in if I lost my stack. But, at the same time, it was also very obviously a result of extreme hubris and is hopefully a wake up call to the dangers of subsuming your entire decision making architecture to an ideology. Both the developers and the users of Coldcard were almost exclusively “toxic maxi” types whose seething hatred and distrust of governments, shitcoins, and communists was basically their entire personality. All they needed to know that someone else was a perfect, infallible genius is that they shared this ideology; and all they needed to know that someone was a stupid, lying coward was that they didn’t. This exploit was thus not one of code but of cognition. And its the same one we criticize the progs for constantly. If someone supports gays and trannies and hate white people, progs consider them team prog and will rationalize or completely ignore that they are also a pedophile. Similarly, if someone hates governments, communists, and shitcoins, they are team Bitcoin maxi and the maxi’s will rationalize or completely ignore that they are a horrible programmer; and vice versa. “Trust but verify” stopped being a methodology and became a marketing slogan. As long as a brand had the slogan plastered everywhere, they were able to bypass the verification step of the methodology entirely. Again, no one deserves to lose their BTC, and it would have been far better if they could have realized the LARP without losing their life savings. But unfortunately, this is where we are. The only option now is to take it on the chin, learn from the experience, and rebuild again with a more solid foundation; take this as an exercise in anti fragility, improving from failure just like Bitcoin itself does.