Crypto crime (financing terror, money laundering, fraud, ponzi, etc.)

...
Cryptography is hard. Implementing it securely is harder. And the part almost nobody thinks about, generating high quality randomness, is where the whole thing lives or dies.

This week's Coldcard incident made that visible in the most expensive way possible.

What broke. Every private key you own derives from one number: the seed. If that number is predictable, everything derived from it is too. Coldcard's firmware was supposed to draw that seed from a dedicated hardware RNG. It didn't. A guard checked whether a config macro was defined, not whether it was enabled, so the build silently fell back to a software generator seeded from the chip's serial number and timer, values an attacker can reconstruct. Older devices were effectively deterministic; current ones were capped near 32 bits, about four billion possibilities. A seed space advertised as 128 bits collapsed to something you can enumerate. Researchers estimate more than 1,000 BTC drained from roughly 1,200 wallets, from a flaw sitting in public code since March 2021. The device never had to be touched.
...

Click to expand...

...
In simple terms, here’s what happened:

Imagine your 24-word seed phrase is like a lottery ticket that should be picked from an unimaginably huge number of possibilities. Normally, the chance of someone guessing it is effectively zero.

With some versions of the Coldcard firmware, a bug meant the wallet wasn’t using enough true randomness (“entropy”) when creating new wallets. Instead of choosing from an astronomically large pool, it unknowingly chose from a much smaller pool.

A simple analogy

Think of it like this:

Correct behavior: Pick one grain of sand from every beach on Earth.
Bugged behavior: Pick one grain from just one bucket of sand.

It’s still hard to guess—but suddenly it’s realistic for a determined attacker with enough computing power.

What actually happened?

A firmware bug caused the random-number generator used during wallet creation to produce less random seeds than intended.

According to Coinkite’s analysis:

Mk3 devices could end up with roughly 40 bits of effective entropy.
Mk4, Mk5 and Q were less affected but still only had around 72 bits of effective entropy for affected seeds, instead of the much stronger randomness expected.

Why were coins stolen years later?

The seed was weak from the very moment the wallet was created.

Attackers later figured out the flaw and were able to:

Scan the Bitcoin blockchain for addresses.
Recreate candidate seeds using the weakness.
Check whether those seeds matched wallets with Bitcoin.
Spend the coins if they found a match.

The Coldcard itself wasn’t hacked. The vulnerability was in how some wallets were originally generated.
...

Click to expand...

pmbug said:

I'm seeing a lot of reports like this on X today:


Scary stuff.

Click to expand...

searcher said:

Just a little food for thought, make of it what you will. Some replies are pretty good.

Click to expand...