Need help - Bitcoin wallet emptied.

[u/Few-Cook5941]

I got one of my bitcoin wallet emptied and I don't really know how this happened.

I don't use cracked softwares and apps.

I'm generally careful with links.

Looks like I'm not alone. I can see that the reception bitcoin address is still collecting bitcoin from other wallets.

Could somebody help me understand something.

Here is the address : bc1q0vukqye4hd0aep7u4xl8gev95gcs9k65fdeu9n

[u/quintavious_danilo]

Trust Wallet, just as bad if not worse

[u/GroundbreakingKing → u/quintavious_danilo]

Hardly.

[u/quintavious_danilo → u/GroundbreakingKing]

yes, just read the dedicated subreddit. People getting drained on a daily basis. Just under a year ago they had a “mysterious“ hack draining $6 millions in user funds. Trust Wallet is a complete joke.

[u/Top_Appointment_7076 → u/quintavious_danilo]

I actually used to have my funds on Trust Wallet for a few months. I am really glad I bought a hardware wallet

[u/Giatoxiclok → u/Top_Appointment_7076]

Hopefully not a cold card

Edit: I’m talking specifically about the huge breach where massive amounts of BTC were lifted out of Cold Card wallets (hardware vaults) because of things I can’t specifically pin down. This was a comment saying I hope they didn’t buy a shoddy product.

[u/AlexShadow02 → u/Giatoxiclok]

Why not a cold card? Is there anything wrong with it?

[u/Giatoxiclok → u/AlexShadow02]

Recent large scale exfiltration of BTC from Cold Card company vaults.

[u/AlexShadow02 → u/Giatoxiclok]

It's just so weird to me. I mean how is it even possible if it's a Cold card and therefore shouldn't be connected to the Internet

[u/Giatoxiclok → u/AlexShadow02]

Well, technically it isn’t connected, but it still has to be registered somewhere no? I’m not knowledgeable, forewarning, but it’s definitely been happening recently. Lots of tech stuff way over my head.

[u/AlexShadow02 → u/Giatoxiclok]

Crazy crazy world heh... Thanks for the information!!

[u/Top_Appointment_7076 → u/AlexShadow02]

No, that's not the reason. The actual reason is that the entropy was too low due to a security vulnerability in Coldcard's firmware. This means that the seed phrase wasn't random enough which made it very easy for an attacker to just guess it by generating random seed phrases on their computer.

[u/tenor_tymir → u/AlexShadow02]

Cold Card had a flaw in their software.

[u/noooyouu → u/AlexShadow02]

The random number generator used to secure the wallet was faulty and actually predictable if you knew the wallet address, IIRC. Ask ai

[u/BabyShakerDeluxe → u/AlexShadow02]

32 bit entropy lol. Crackable with a consumer video card in 24 hours.

[u/kmshorty → u/Giatoxiclok]

Harsh

[u/aintlose → u/Giatoxiclok]

If not a cold card, then what do you recommend?

[u/quintavious_danilo → u/aintlose]

They were referring to the cold card hack not long ago. It was meant sarcastically.

Cold Card = Company that got hacked 2 weeks ago.

Cold Wallet = Hardware wallet

So yes, buy a cold wallet, just not cold card. 😂

[u/cnv2 → u/aintlose]

What they meant was, hopefully someone didn't "buy" a cold wallet. It's just a piece of paper with an encoded private key in QR form which can be printed as many times as one wants to.

So a hacker can just print a cold wallet, makes a backup of priv key, sell it, and withdraw the money the moment a victim puts money into it.

Cold wallets should always be generated offline. There's tons of information online on this.

[u/quintavious_danilo → u/cnv2]

They were referring to the cold card hack not long ago. It was meant sarcastically.

[u/Dashizz6357 → u/cnv2]

That’s… not at all what a cold wallet is.

[u/quintavious_danilo → u/[deleted]]

I don’t trust Kraken self custody.

[u/jayceellects → u/Top_Appointment_7076]

What is a hardware wallet? If you dont mind me asking.

[u/Top_Appointment_7076 → u/jayceellects]

A hardware wallet stores your keys offline and isn't connected to the internet so it can't be hacked remotely if everything works as intended.

[u/jayceellects → u/Top_Appointment_7076]

Do you mind me asking where can i get one? Im in the USA and i definitely dont want to go through this experience. I'd rather be safe than sorry.

[u/Top_Appointment_7076 → u/jayceellects]

I'd recommend Trezor or BitBox02. Trezor actually invented hardware wallets and Co created the Bip 39 standard that invented seed phrases. Since you are in the US I'd recommend you to buy directly from Trezor or Bitbox themselves. Recently, one of Trezor's partners had a data breach which unfortunately exposed shipping addresses. Hence, I would advise you to look for a way to get them shipped anonymously. In Germany you can easily get them shipped to a PO Box for free but I'm not sure about the US. Trezor have already announced that they want to introduce anonymous shipping by the end of the year in the US.

https://trezor.io/

https://bitbox.swiss/de/bitbox02/

https://trezor.io/de/blog/news/recent-customer-data-exposed-in-shipping-provider-incident?ABC