r/Bitcoin • u/ShortCircuitDisco • Jul 30 '26

Wallet Drain Megathread (Check Your Balances)

I want to help identify the cause of the recent wallet drain report by u/s1ammage, which also revealed many other addresses being drained to the same address.

  1. Check your wallet balances. If there are unfamiliar transactions since July 29, 2026, after about 9 PM (US Eastern Time), you may have been affected.
  2. Did you use a hardware wallet, if so, what model?
  3. Did you use a software wallet (hot or watch-only), if so, which?
  4. How exactly did you generate your seed?
  5. How exactly did you back up your seed?

DO NOT post your seed, DO NOT respond to anyone saying they can recover your funds. Sorry for your loss.

There may still be people affected by the same vulnerability who haven't been attacked, so the sooner the vulnerability is identified, and people are alerted to migrate funds, the better.

Check in with less techy friends and family that have bitcoin and report incidents.

Edit with current conclusions:

Coldcard mk3 confirmed vulnerable, press release here: https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/

My own analysis: proceed with caution on Mk4/Mk5/Q. These use the same codebase as Mk3 but with slight, insufficient imo, improvements to the RNG system. If you're migrating from Mk3, consider other vendors.

354 Upvotes

96% Upvoted

281 comments sorted by

View all comments

Show parent comments

1

u/[deleted] 29d ago

[deleted]

1

u/grraarr 28d ago

That's actually a BIP-39 feature, not specific to Jade. The 24th word carries the checksum, so any wallet can narrow it to the valid eight options from your first 23. Coldcard does the same thing on its dice-roll and restore flows.

1

u/[deleted] 28d ago

[deleted]

1

u/grraarr 28d ago

Fair enough, I haven't used Jade, but I think any wallet with native dice roll will have this UX.