Hacks & Exploits
Coldcard Co-Founder Scrubs Social Media Amid $130M Theft Crisis
Rodolfo Novak (NVK), the co-founder of Coinkite, the company behind Coldcard hardware wallets, has begun deleting posts from his social media accounts. This action comes in the wake of a staggering $130 million theft from Coldcard customers, attributed to a security flaw that allowed hackers to exploit weak private keys generated by the wallets.
For more than five years, Coldcard wallets have been generating private keys with insufficient entropy, a vulnerability that was recently discovered and exploited by cybercriminals. As a result, victims have seen their funds drained through brute force attacks on these insecure keys.
Concerns have arisen regarding the removal of historical posts, with some speculating that Coinkite has also erased content from its website. For instance, a post from November 2024, where NVK warned about a potential backdoor in a knockoff of Coinkite's Blockclock, has vanished, leading to speculation about the motivations behind these deletions.
Bitcoin developer Peter Todd highlighted the deletion of NVK's posts, sharing a screenshot of the original content before it was taken down. The situation has sparked fears among Bitcoin enthusiasts that Coinkite's products could pose security risks.
In response to allegations of content removal, Coinkite has stated that the claims are debatable. However, a recent examination revealed that a mention of an 'Unnamed v.4.0.0 security issue' had indeed been deleted from the company's historical disclosures page.
Despite the ongoing scrutiny, NVK has retained some posts, including a pinned apology for the Coldcard security failure, where he expressed his devastation over the situation. Critics have accused him of selectively deleting posts to obscure the company's troubled history.
As the situation unfolds, many in the crypto community are keeping a close eye on NVK's actions, with some urging others to document any remaining posts before they disappear completely.
FAQ
What prompted Rodolfo Novak to delete his social media posts?
Rodolfo Novak began deleting posts from his social media accounts following a $130 million theft crisis attributed to a security flaw in Coldcard hardware wallets.
What was the security flaw in Coldcard wallets?
The security flaw involved Coldcard wallets generating private keys with insufficient entropy, making them vulnerable to brute force attacks by hackers.
What concerns have arisen from the deletion of social media posts?
Concerns include speculation that Coinkite is attempting to erase its troubled history and obscure information about past security warnings and issues.
Has Coinkite acknowledged the removal of content from its website?
Coinkite has stated that claims of content removal are debatable, but investigations have confirmed that some historical disclosures have been deleted.
What has Rodolfo Novak retained on his social media accounts?
He has retained a pinned apology for the Coldcard security failure, expressing his devastation over the situation, despite deleting other posts.