Given his personality traits, the best outcome I would hope for is for him to step back from CoinKite daily business and let somebody more open and empathetic lead. Allow issue trackers for a start. Allow criticism without threatening to sue.

Forget the uid. If it's less bits than the timer, the latter scrambles all its bits.

Not unique uid? Damn! Still, claimants could show receipts to transactions in their wallets.

If I knew how to pull this off, I wouldn't without legal advice or confidence to be able to remain anonymous. Of course it's a legal mine field but it happened before.

The uid is a start although it gets XOR-ed with a timer that scrambles most but not all bits of the uid. I bet you would end up with at max one plausible claimant per wallet.

Hack the exposed wallets to give the bitcoins back to those poor victims of CoinKite's negligence.

Are any white hats stepping up already?

And when will you drop that sponsor? Sadly the situation is highly time critical.

The irony: Should some miners maintain the bip110 chain even at a low exchange rate, sharing media on prestine Bip110Coin will be cheaper than on corrupted Bitcoin.

PLEASE! Check your chat apps and search for friends and family that might use ColdCard. Not all are on X and nostr all day long. The only way to not suffer catastrophic losses is to be faster than hackers. I searched my chat history for "coldcard" and "cold card" and called people up I suspected might have switched to this product. There's no time to lose!

So I sent DMs to 50 people and groups I know handled Bitcoins in the past and sure enough found one victim. Most haven't reacted yet. Most that did were safe. Keep looking after your peers that might still save their life savings.

With enough tokens, every bug is shallow.

Shit take of the day ...

No. They claimed they tested for exactly this. Guess they didn't.

CoinKite introduced the bug with their self-made crypto solution precisely to prevent others from copying their "great work", so if anybody copied their backdoor, they violated CoinKite's license doing so. That said, of course others could have similarly catastrophic bugs.

When picking a hardware wallet, be conservative. I find it so hard to recommend any and trust Trezor the most to do it right. That said, multi-vendor multi-signature in theory is the most secure.

Tombstoned BIP110. will disagree.

Agree. 20% high conviction could flip the other 80% indifferent but that's a remote theoretical and "indifferent" isn't clearly the case in this instance.

Well, we are all thinking hard who might have a CC and we are all calling them today and yesterday. I hope later hacks will find many empty wallets but we might be in a bubble and there's many users that never told anybody about their CC. I hope, somebody more trust worty than does white-hat hack all the remaining wallets before some black hat does but it's a legal mine field, so ... let's see. The kind of worst outcome would be CoinKite doing the white-hat hacking and ending up with a wind-fall from not timely reclaimed funds.

That looks like you're quite close to the epicenter.

Is the opposite opinion allowed in India?

17k tokens per second on 250W is insane! As proof of concept ... How does that compare with gpu?

"they did everything right" according to nvk who pays all the podcasts in the space. Obviously when you lose money, you did something wrong. To claim otherwise is childish. We have to learn from this what we could have done better.