EMERGENCY BITCOIN UPDATE: Coldcard Attack Explained | Rob Hamilton

0:00rob hamilton damn man crazy crazy 24 hours we have a legitimate emergency in bitcoin um what's been going on um i in the spirit of emergency i'm just going to start this with if you or anyone you know has used a cold card mk3 mk4 mk5 q any of those devices with any wallets that were generated from the device you clicked give me some seed words um you need to immediately stop what you're doing and contact friends this is a canceling of weekend plans this is getting on planes for any ability for you to be able to recover your bitcoin this is uh as about as code red as it can get for bitcoin self-custody as it relates to the urgency in which you need to act um i will go more into the details with that urgency i want to caution um slow is smooth and smooth is fast so you need to act very decisively and you need to be able to act deliberately you should reach out to your friend networks and people that can help you support um any questions you may have but time is of the essence right now so maybe we should just start with what happened um because i first stop your podcast if you have to like you need to

1:26stop like you but yeah this is not going now this is not a drill continue um and so i obviously first saw this pop up on twitter yesterday um i actually had a cold card mark four that was using as almost like a spending wallet but the amount in there had got to a point where i was like very uncomfortable as soon as i saw this news i text you being like i've seen this thing with the mark three is overblown or do i need to do something and again you were like this is not a drill you need to do something now i wasn't with my wallet managed to managed to sort that out but this is like a serious product a serious problem that's impacting a ton of people um where did it all start so uh in early of 2021 there was a change to the cold card firmware as it relates to the entropy that gets created and that is when a bug was introduced now uh since i will take a moment to explain the nature of the problem um if you had uh an ear-gapped wallet never talked to the internet it doesn't matter the things that would save you if you were using a cold card mk3 mk4 mk5 and q is if you have a sufficiently strong 25th word passphrase if you also rolled dice or provided

2:47your own entropy from outside of the cold card the nature of this bug is that when you turn on a cold card and you have a clean device and you say this is amazing can you please give me some seed words those are not secure so i want to be everything else needs to go down yeah i just want to be really clear so that we don't miss anyone here you obviously said mark three four or five or q what about the mark one or two if they were on updated firmware and they still generate those keys after 21 uh to my understanding the mk2 is not supported in any of the impacted firmware okay i'd have to go double check but the mk if you have an mk1 and mk2 technically the firmware bug that we're talking about has not been introduced um because that is long end of life hardware there aren't updates for that really anymore um and so if you have an mk2 or mk1 you should not be impacted by this okay and then i think we should also be really clear on the pass phrase because that's essentially a 25th word um at this point that's the only word really keeping your bitcoin secure is that right if you really only used one word that is right which means you

3:56are not secure you have to assume with what we're discussing right now is that many attackers not just one person there are many attackers right now who are scanning to get the entire table of all possible seed phrases a cold card could generate whether it was 12 words or 24 words and they are sitting on all of those words and they are taking all of the low-hanging fruit of single signature keys my assumption is they're going to move on to other things but we'll get to that yes and and so the passphrase is is the only thing keeping it secure if you've done that you should still probably move funds would you agree absolutely uh especially if it's one word so like a one word password is not strong um there are different uh perspectives on exactly how to mitigate this rather than if you're in the zone where you're kind of debating am i safe or not you just need to stop what you're doing and uh recover your bitcoin before it gets stolen um in theory if you had 12 like 12 random words that you added on top of that Okay like you in a better spot but now your entire security model was oh an attacker needs my seed words and my passphrase And the seed phrase is now known by multiple actors at this point or will be imminently over the coming couple of days

5:19if not like maybe a week. But honestly, this is something that you need to move as fast as possible. So the only way you're secure is if you create your own entropy and doing that obviously comes with its own risk that you have to do that very carefully, very consciously. Is it kind of to the point where if you're using a cold card device, just move off it for now? wait and let the dust settle then see what happens um yeah like there there are a couple things so if you have a cold card and you generated your own entropy there is no identified bug in any of the firmware from the operations of anything else besides the generation of the seed now to be very clear the most important thing a hardware wallet can do is give you a secure seat phrase yeah power users will roll dice and do other things to bring their own entropy into it so it exists outside of the cold card. Tragically, exactly for reasons like this of not trusting the cold card and that you're not going to trust it to provide that information reliably.

6:19If you have a very strong passphrase or you roll dice, for the time being, there's no urgent need to move as long as you're very sure that you rolled those dice. To add to that, for migrations and things to do. That is, there's a longer conversation we need to have there. If it's a single signature, specifically with the MK3, you need to do that right now. The MK3 is identified to have two to the 32 bits of entropy. Now, if you're familiar with seed phrases, right, like these words, is that there's a list of 2,048 of them.

7:00And each time you can pick one, you can even have them sometimes be the same word each time you're basically picking 2048 multiplied by 2048 multiplied by 2048 so if you take 2048 times 12 you're close to 128 bits of entropy which is really good and if you do the 24 um you're at 202 to the 256 both of the like we're talking numbers that are in the scope and size of there are more possible seed word combinations than there are atoms in the observable universe and to explain why this is a problem the nature of cryptography and bitcoin security ultimately is that everyone your bitcoin address ultimately in one way or another results back to a large number some number between zero and two to the 256 that is the universe that is the the universal proverbial needle in a haystack and the idea is not that someone can't know my number it is for someone who doesn't know the number to be able to guess it they have to basically guess all of the numbers in the universe and the universe will go through a heat death before someone's able to get there with all of our modern computing right the problem with the cold card

8:10firmware with this firmware change was with some of the changes i saw it succinctly summarized as there was code that said hey use extra secure entropy um and then continue there was basically a one-line error that just said oh does this function exist somewhere if so you can skip the entropy and rather than is this function true right it was like a true false statement and rather than it being is this true we should invoke that uh you can skip the entropy it was like oh this exists so we can skip the entropy that's the best highest level it is one line of code um of how i can describe this issue but the thing is with the mk3 since you have two to the 32 bits that is trivial for consumer hardware to be able to brute force all of the c phrases the mk4 the mk5 and the q have updates to the firmware the those updates to the firmware are not better in the sense of you don't have to worry about this they are extra entropy what people in the industry are estimating right now somewhere between 45 and 50 bits of entropy which is more that is a significant amount more extra protection but with someone with a data

9:30farm of gpus they will get this information and now the people that know that money's being stored on it it will be consumed rapidly and quickly so uh if you did not use a passphrase if you did not use um a seed phrase like uh if you did not roll dice you need to right now stop what you're doing and you have to treat those funds as you're in a race against the clock across many teams of hackers who are going to get your Bitcoin. So the obvious question is like, how is this bug not spotted?

9:59Like for me, like this is obviously source viewable software, but I can't read that code. You can like, did you ever go through and read the cold card code? Like how was that not spotted early? Yeah, I had gone through it previously. I had gone through it with my own eyes And I'd also had gone it through earlier versions of large language models. And what I have observed and I think this is an important part of the story is the latest open source bleeding edge model Kimi K3 which is from China It's an open source model, does not have the safety guardrails that OpenAI and Anthropic have.

10:38And so when this incident started happening, myself and many people in the industry started looking exactly at where this would go wrong in the code. And Fable would downgrade me. So you can't use the leading model. This is a cybersecurity thing. And then using OpenAI, it would kind of like be coy and generally nudge that something may be going on, but not tell me details. I put it into Kimi K3 and it instantly just read out the entire incident and exactly what went wrong.

11:04and so uh there is something to be said that for a long time uh security through obscurity was used in places and that is no longer possible if the code exists and people are able to walk through and see it it will be exploited it's um so when i first saw this i assumed that it was a lazarus north korea type hack very sophisticated but i've read some stuff online that says it's maybe a bit of an amateur doing this doesn't really know exactly what he's doing but still managed to exploit this bug the first the first attacker was i would say an amateur um there's a lot of on-chain heuristics of what you could tell in the movement patterns they only moved bitcoin addresses that were more than 0.15 bitcoin why someone wouldn't run a little extra logic and just get 0.1 bitcoin at six thousand dollars for no extra cost really that's weird they did not properly scan full addresses so people were getting hacked and they still had funds that were sitting in the addresses was that i did see something about that was it because it was only looking at like the first 200 utxos or something like that it was looking uh what it was doing is looking for the

12:16first gap so if you create an address and you didn't use it and then you made another address and you use that second address the moment the bot saw that there was no more addresses it stopped looking uh and this is initially would have kept you safe but this is going back to the point now there are multiple attackers now executing this and i'm assuming they're getting more and more sophisticated so like that's it and that's why you can see different on-chain movements and seeing different wallets being used um different transaction behaviors you can just tell by some basic fingerprinting that different actors are going about this that makes sense so but this is something you can do trivially like i could do it on my laptop if i had like the skills yeah uh there are reports of white hat hackers which is people who are trying to do it for the good who started seeing this exploit started running code and came into dozens of bitcoin and they swept them because they were trying to do they'd rather at least try to find a way to give it back to the right owner and then try to uh let an attacker take it so people will be in a panic

13:22hearing this if they're using a cold card. I want to talk about some of the other devices because cold card was initially like a fork of Trezor. And since then, Foundation has forked cold card. Are those other forks from the same thing safe from the same original source code? Yeah, neither Trezor nor Foundation use the library that was compromised with the cold card. Okay, so basically anywhere is safe apart from cold card right now. This isn't like a broader self-custody attack.

13:49This is a specific cold card. The use of this library was specific to cold card or realistically mainly cold card. So what should people do if they're panicking right now? Where should they be moving funds? This is something that is for each individual person to kind of make that judgment call. I am, while I am the co-founder and CEO of AnchorWatch, I want to be fair to everyone and talk about how I would console someone if I did not run this company.

14:18and I was trying to help a loved one through this. If you had used a Bitcoin exchange and your Bitcoin is, you know, in the system, you give an exchange dollars, you get Bitcoin, you withdraw it to self-custody. Immediately short-term, sending it back to that exchange is not a bad idea if you have no better place to do this. I'm a big fan of River, personally. I have high confidence in the infrastructure over at River if you're looking for a good Bitcoin exchange.

14:46I'm talking to other people in industry. I just know that River runs their own custody. They're not outsourcing it to someone else. And I think that's an important thing to be aware of, and they do proof of reserves. I think really genuinely proof of reserves is kind of table stakes if you're going to leave your funds out in exchange. And River is the main place that does that. As it relates to other options, now, you could, in theory, go to a Best Buy and pick up a ledger in the States today.

15:17You can get bit keys there as well. You can get bit keys as well. Those are good immediate emergency options to get things set up properly. And to be clear the whole context of this advice is your funds are imminently going to be hacked if you on a cold card without the entropy and without the dice and without passphrases So my advice is not set this up and hang out for the rest of your life This is you need to do something in the next 24 hours. Now there are other services like there are Unchained, there's Casa, there's us at Anchor Watch, there's a Swan Vault as well. There are many products across the industry that offer these things in collaborative custody. I think those are all great measures to be able to provide extra support to people um if you have a friend um we won't say who but as we were starting this podcast you and i got a call from a mutual friend who was basically breaking into a friend's house who was on vacation and getting this pin over the phone to then move the funds before they got hacked uh they had a reliable self-custody wallet to be able to do that right um the universe and space of this has to be very carefully thought out and this goes back

16:36to um something i believe i said before is that um slow is smooth and smooth is fast so you need to have a decisive plan that is good enough for the trade-offs right now and decisively execute you do not have days to really war game out your optimal option here it's just most important that you take action now there's so many things that are very unfortunate about this um from a user perspective like one of them especially comes down to sort of privacy um because if you're in a panic now you might have a ton of utxos on a cold card some of which may be like non-kyc bitcoin stuff that you don't really want to mix but at this point you kind of just have to move everything together like that's one of the really unfortunate outcomes indeed yeah uh while you could if you are technical enough spend the time building a careful transaction graph i'm going to assume most people aren't and so you have to make a cost benefit analysis for your own position to understand is that with any of these movement options and how you're going to execute about them you are the best person to be able to understand your circumstance and that's why i try to keep the

17:44advice very open-ended in general to meet different people depending on where they could be in their self-custody journey and their Bitcoin journey and their technical competency. And then the other side of that is the thing that is very harsh about this situation that's completely unlike a Mt. Gox or an FTX is that the people that have been affected by this have done everything so right. Like they've taken the time to learn self-custody. They've bought what was sort of perceived as the most secure Bitcoin hardware wallet. They've done everything correct and they've still been fucked in this situation.

18:19Do you think this sets back Bitcoin self-custody in a significant way? I think it would be naive to say that in the short term that there's going to be a massive re-evaluation of this. many people lost their life savings because of this um i think it's important for bitcoin as a technology as people who send and receive bitcoin regularly to be thinking about where to go from here uh the capturing of bitcoin as a decentralized network is accelerated if the only place you can hold it is at a quality like a specific exchange that is inevitably bitcoin is freedom money cannot work if you're not able to freely be able to call your money and own it and touch it yourself now i think there's a this is so pressing and breaking it is difficult for me to come out with my prescriptive list of these are the things we should be thinking about and doing I think most important right now, what we should be doing is informing people, letting them know that this is happening, giving them ideas for contingencies.

19:43There's a couple of more threat models I do want to go over for maybe more advanced users as it relates to ways that your funds could additionally be put at risk. and i'm going to start there because i think that's actually more important than like the bigger question is if you have a multi-signature wallet and they are only using cold cards and those cold cards are only generated using this entropy your funds are at risk and you need to immediately make whatever moves you need to do to get that fixed if you have let's say a two of three and you have two cold cards in a ledger and you did not do the passphrase and you did not do the dice rolling, your funds are at risk and you need to make moves immediately to rectify that.

20:30Now, to explain, I feel fairly confident this is what's going to happen. Can I ask you a question on that part first? So you said if you have a two of three and say one device is a ledger, one device is a Trezor, one device is a cold card Mark III, even in that situation, your funds are at risk? No. So if you have... a treasure, a ledger, a cult card, your funds are not at risk. If you have two cult cards and a ledger, your funds are at risk. Yeah, because those two can...

20:59Yes, and this is to get a little bit for those that need to know, because I have talked to... I've probably talked to at least a half dozen people specifically in this situation, if not more, where they have two cult cards and a ledger or two cult cards and a treasure or two cult cards and a jade or two cult cards and a foundation device, whatever, two cult cards and a seed signer, right the necessary thing to understand is that when you go to spend bitcoin in the bitcoin network let me actually just take a half step back here what is going to very likely happen across multiple uh hackers is they are going to build an entire list of every single seed phrase combination that the cold card would do without entropy what they are going to do from there is they are going to start realizing, wait, if I have all these seed phrases, I can actually see if my wallet's being used on chain. And they're going to say, okay, out of this, you know, billions, we're going to say that we have this many that could be in use at the moment. They're going to look at those and they're going to see what are they doing with it. And to be clear, if you use your cold card

22:08in a multi-seg, they can see, wait a second, that person spent from this address and that public key is tied to my list of seed phrases here. They're going to be able to basically monitor your wallets. Here's what happens. If you have reused addresses, those reused addresses have the raw public keys of how you spend that Bitcoin sitting on chain. And if it's a two of three and the attacker says, oh, I have key A and key B, they'll just take the funds.

22:35They don't need to wait for you to do anything. If you have not reused addresses, you are in a very delicate position and this is a little bit advanced and i want to be clear this is a very specific circumstance if you have a multi-signature wallet and that multi-signature wallet is a majority for the threshold uh cold card signers that are impacted by this issue you should look into using something like mara slipstream and the reason why is when i go and broadcast a transaction to the bitcoin network anyone on the network can see the transaction data before it gets confirmed but it's not in a block yet which means an attack by flea exactly so an attacker will be able to replace by fee and change the address from your address to an attacker's address if you use something like mara slipstream you will be able to have it broadcasted to a mining pool that has over five percent network cash rate they find multiple blocks a day and it will just appear confirmed on chain which will mean the attackers will not be able to do anything and so i know it's a very specific circumstance but i've talked to easily a half dozen people who are in this exact

23:43position and you can reach out to mark like there are ways for you to be able to do that um if you only have cold cards if you have a three of three if you have three cold cards and it's a two of three they will find your funds they will look at all the seed phrases and once they have all the possible seed phrases they're going to run through all of the common metrics of different multi-sig thresholds among those keys if they haven't already been spent on chain if you've spent from your multi-sig address once on chain they will be able to trivially scan and see that it's there and be able to attack you um and know that yeah so in that situation slipstream doesn't help you so what do you do you just have to set an incredibly high fee rate and hope you just have to go you just have to rip it you you don't have a yeah so if you've and to explain this let's say you have a two of three multi-sig and they're all cold cards you and you've spent from it before attackers will be able to see oh key a key b key c that matches seed one two and three boom boom connected i'll be able to move my funds so if you have a an n of n two of two three of three whatever

24:48multi-sig wallet that is only cold cards that are impacted by this issue you need to move funds right now like you you are marginally safer than a single sig and the reason why is because you need to have an attacker know all of the seeds in the universe to be able to attack it but that is a ticking time that you're racing against the clock you need to immediately make moves if that is the position you're in oh it's such a terrible situation to be in um do we know how much bitcoin's been stolen from this attack so far i saw yesterday it was like 600 but i'm sure it's increasing it's over 1100 at this point and there's probably more clusters going on all the time um i occasionally was poking around the men pool to see if i can find more things it's going to be thousands of bitcoin before this is done and it's going to happen in waves what i'm describing right now this race against the clock the lowest hanging fruit were hit and that was probably one attacker the starting gun has been fired off the everyone has declared the emergency every black cat hacker on the internet with an llm is going to be able to start poking around seeing what they can find

25:49they and because there are multiple attackers now there's a an inevitable outcome where well capitalized ones are going to come in spend millions and millions of dollars on graphics GPU computing because they know that they can pop one vault what you be able to have an attacker do is they're going to be able to look through the full list and just pop it right out and you are just marginally safer because it's not the lowest hanging fruit but you are not safe period so this started as obviously like an amateur attack as we spoke about a little earlier but this is now you have to assume the best attacks in the world are now having a go at this yeah this is everyone it's a it is a real mess so when you compare this to like a Mt. Gox or a FTA the number of coins is going to be far lower but is the damage going to be greater because it kind of arose people's trust in self-custody essentially like cold card was the golden child of Bitcoin self-custody essentially i like i said earlier it would be naive to say that in the short term that this is not going to be a uh a very negative downward pressure on self-custody and for i know multiple people

27:09who've lost either some money or their life savings uh i have spent the past 24 hours i have talked to directly on a one-on-one context dozens of people um in a larger platform i've talked to now thousands of people trying to raise the alarm bell about this and the stories keep on coming in this this will have a downward trend on self-custody i think that doesn't have to be the end of the story but i think there needs to be as the post-mortems wrap up and we do a full debrief of this the entire ecosystem has an opportunity to build from here and find improvements um we are now almost 30 minutes into the podcast so um in some conversations people are talking about we need covenants and vault-like structures yeah things that can improve self-custody my biggest concern for the health of Bitcoin as a network is that the default option being holding it at a custodian or an ETF wrapper. I am not opposed to those instruments existing. I think those are inevitable structures that happen with hyper Bitcoinization. But the value proposition of Bitcoin itself will be diminished greatly if those are the only real options. And being able to

28:33to explain this, the way Bitcoin works today, if you have the requisite amount of signatures, you can send any amount of Bitcoin anywhere within reason. There's weird corner cases, but let's just say for the sake of conversation, that's true. Things like covenants would allow you to be able to have things like, I only want to be able to send to these addresses. I only want to send this much Bitcoin. This is something at AnchorWatch we are able to offer as a product level service, right?

29:04It is an application that sits on top of Bitcoin where we say AnchorWatch is a required co-signer to move funds but we will in exchange for like us being able to help you out we'll say okay well you only can send to the addresses you give us so addresses a b and c otherwise we at anchor watch won't sign it's effectively a covenant as us acting as a cosigner gives that feature or i only want to send one bitcoin a month that's something we can do at anchor watch it's something you can't do on the bitcoin blockchain level if it were to be democratized to the bitcoin blockchain level anyone in their basement would be able to have orders of magnitude better security than any of the enterprise leading custodians today and that's an important point because when bitcoin is in flight once it gets confirmed in a block it's over whereas with covenants and in general vaulting you would be able to send to like a staging address so you'd be like wait a second why did my funds move it's sitting in my staging address and then you can pull the emergency ripcord to like pull the funds out now it doesn't solve the key management problem

30:13right i think it's an important thing to call out that it is a mitigation it is necessary but not sufficient to be able to improve these things but the ultimately you need to send bitcoin to an address somewhere and those addresses have to ultimately be tied to keys so there is a lot of learning, I think, within the ecosystem about where do we go from here. And I think there'll be plenty of time to discuss that in the coming weeks after the initial incident response and everything can be done as much as possible to keep people safe. Right now, I think the main focus is just letting everyone know this is happening and they need to immediately remedy this if they're impacted how do these um there's a thing like an unchained or a cassette let's say you have a two of three with one of those um if i have so one key will be on your phone generally one key will be held by the company one key is held by you If I holding my key let say on a cold card how do I know that the counterparty the unchained or the CASA is not?

31:23The unchained or the CASA counterparty is not what? Like holding one of their key on a cold card because that would then put the multi-sigual risk. You can't prove that. You can't with any wallet wealth in a very tragic sense of irony. Very soon people will be able to prove if they were using the cold card keys because attackers will have them. Right. The ideal structure, though, is that it's not something that can be an issue. because if you have sufficient randomness there's no you should not be able to fingerprint and say oh that that x pub came from a ledger and that one came from a jade that would be a breaking in the underlying cryptography assumptions that is a truly random number that is seeding all of your secrets so i guess the point i'm trying to make i'm trying to make people feel comfortable here if they are using a castron unchained like have either of those made a statement about how they're generating their keys?

32:22Because I'm convinced that neither of those companies are using the on-device random number generator. But have they made any statements about that? To my understanding, Unchained has made a statement. I believe Casa has made a statement as well. And we at AnchorWatch have also made a statement that this does not impact us. And so I think it's an important thing to look in your vendors to see if this is an issue. I think that's a very reasonable concern.

32:51but i think everyone at this point has made some public statement to the effect of that i'm not aware of any i'm not aware of any bitcoin business even through like hushed private circles who are impacted by this i haven't heard anything yet they may exist but i have not heard anything i i definitely don't want my words to be twisted there like i think a cast for an unchained like anchor watch i'm sure all those companies are set up brilliantly um i just i just want to try and make people comfortable with moving funds to those places if they need understood um anchor watch how do you set up your multi-sig uh yeah so the nature of what we do it's somewhat different is we use what's called mini script and that allows us to do more advanced scripting functionality uh rather than just a two of three we are able to say we have a two of three you have a two of three we all have to get together and sign and move things we could do is we have a Two of three and you have a single key, right?

33:43And we act as that cosigner still, right? The nature of how anyone generates keys is an extremely sensitive thing because you just need to keep that on a need to know the exact mechanics. But our process has been peer reviewed. There are many, I think most actors in the industry have their own very rigorous key generation ceremonies of what they go about for being able to. evaluate that so when like i really like single sig self-custody like i think i think you should have different trade-offs for different amounts of bitcoin that you're holding like if maybe you have one sort of deep cold storage which is geographically dispersed multi-sig and that's great but the simplicity of single sig is really important too i think i i would definitely still use that occasionally um how do people think about that going forward because i've always i've always said that like the most likely you are to lose bitcoin is through your own complexity in your own setup like complexity being the enemy of security and do you think people are going to make the mistake now of jumping too far into multi-sig because they're scared of this attack and actually

34:50add too much complexity to their own setups i think multi-sig is no longer that complicated i think this is not 2017 anymore um additionally if for whatever reason you want to do a single signature you could do single signature with a passphrase that effectively is a two of two multi-sig because you have to have both pieces to be able to constitute a spend if you were doing that with a reasonably strong passphrase going into today you're still safe i would still make a new wallet because if you fell under this and your initial 12 or 24 words were actually part of this hit of known possible seed phrases all that's keeping you safe now is your passphrase but uh i think there's a lot of opportunity for everyone to grow and learn from this to even further improve the user experience because this will this will be in the front mind of anyone who discusses self-custody for a very long time so this is the first like in the wild case that we've seen of ai essentially hacking and taking down a bitcoin self-custody solution um do you think this is the start of that era do you think we're going to see more and more attacks like this

36:01i think in general uh across the whole web there are going to be more and more attacks like this um the trivial ability for me to be able to open up to open router and use kimmy k3 and point at the cold card firmware and instantly read out everything everyone needs to be and we regularly do this at anchor watch i know most companies that i know of in the bitcoin industry are regularly doing this and kind of defensively trying to deploy these tools to find things We've always found, we've never found anything that was a money losing bug.

36:37Nothing in the universe of bad of what we're seeing here with the cold card. But you find bugs. The software has bugs. It always will have bugs, right? Like there is some emerging research around things like formal verification. So you can actually do formal mathematical proofs as to how code executes. That's an emerging field of research that I think may get more important over the coming decade. But software is written by humans and humans inevitably have bugs.

37:05And even LLM sometimes have bugs, right? You don't want to be blindly passing everything you've built to just have it go get figured out later by LLM. And the LLM may not be complete, right? The rapid development of these models, there's a kind of a funny software motif. If you like VibeCode a website and you launch it, in three months, the new model comes out and it says, wow, this code base is a mess. Let me fix this for you. And that's just been happening continually for two years now.

37:30So like we're at a place and a time where you need to be hypervigilant with your own individual judgment, with your ability to understand the nitty gritty details of risk and however it emerges to be able to keep you and people you work with safe. All right. Awkward question time. because i know you're friends with mvk but like the blame obviously ends with them but how incompetent was this because this has been five years that this firmware issue has been there uh not acceptable as a starting place like not like there is no yes i've i've known mvk for a long time um there is no excusable there's no set of circumstances that excuses this the the one job a hardware wallet has, if it were to have a single job, more important than all of the other jobs is that it can securely generate a sufficiently large random number with sufficient entropy.

38:31That is the entire game in which everything else gets derived from. There are bugs that have happened in hardware wallets in the past where maybe how they signed a transaction wasn't secure. And then basically, if you reused addresses, you could lose your funds. Or maybe you would have bugs where it wasn't checking the change address. So if I sent you Bitcoin, if I have 10 Bitcoin, I send you one Bitcoin, I have to send myself nine back in change.

38:55There were bugs in software and hardware wallets that didn't check the change, which was the most important part of the transaction in that sense, right? This bug is so foundational to the actual security of Bitcoin that it is a nuclear event, right? This is the most catastrophic thing. That is why someone could be entirely air-gapped, never have talked to the internet, and someone's able to peer through the vast space of randomness and get your Bitcoin, which should never happen.

39:25Do you think it's at the end of cold card? Do you think they'll be able to recover this? Because trust is everything when it comes to these devices. It is. I think it's too early to say. I don't know. I'm not a lawyer. I don't understand any of the liabilities or fallouts or all of these things. it's hard for me to say. Yeah, truly. I don't know. All right, Rob, I appreciate you doing this so last minute. I wanted basically just to get this out there.

39:53If one person listens to this show, they're not permanently on Bitcoin Twitter like you and I and they haven't seen this news, like that makes it 100% worth it. Any closing words for everyone who's listening? Closing words again. If you or someone you know has used an MK3, MK4, MK5, Q, any of those cold card products, without either rolling your own dice or having a sufficiently strong passphrase. And if your question is, is my passphrase strong enough?

40:22It means you don't understand the entropy, which means you need to go fix this immediately, even if it is, right? You just, if you don't know for a fact, oh yes, I have this many bits of entropy in my passphrase because you are super in the details. Your passphrase is not strong enough at the moment. You need to immediately make any moves and plans. You need to cancel your weekend plans. You need to get on a plane if you have to. You need to call a loved one who may be able to help you out remotely.

40:46This is a full five alarm fire. This is all hands on deck. I think everyone in the Bitcoin community has been trying to help through back channels and through direct messages, through being able to have people call you, find people, get connected to people. My DMs are open on Twitter. Like I said, I've talked to dozens of people across the whole ecosystem. None of them even Anchor Watch customers because Anchor Watch customers don't have an issue at the moment.

41:11Like this is not related to anything of how your funds are being kept safe at Anchor Watch. So all of that to be said, like reach out to those you may know, people you've ever referred to using a cold card and do what you can to try and help them out. And I think there's going to be an opportunity in the coming week, two weeks, to when the initial... race is over. We can focus on triage. We can focus on, well, once we move beyond triage, we can start focusing on where does the industry go from here. All right, Rob, I appreciate you, man. Thank you for all the work, helping people out on this terrible, terrible event, but Bitcoin will get through it, man. Thank you. Thank you.

42:10Thank you.