coin control is finally coming to bitkey 🚀 https://x.com/clay_garrett/status/2083425375015579865?s=20

Found something interesting while looking at new txs made to an address containing hacked coldcard funds. Funds were sent from an Ocean miner payout address to an address linked to hacked coldcard funds and then that UTXO was peeled off immediately. Could this dummy have accidentally sent his mining pool payout to the address containing hacked funds? Copy pasta mistake? Block whose coinbase paid miner (tag OCEAN.XYZ): https://mempool.space/block/960511 Miner payout address (payout sat here ~14h 40m before moving): https://mempool.space/address/bc1q9yz2ajh00pq564mu3hfmrafl4hl3fajkr6fuj2 Tx sending that payout to address containing stolen funds: https://mempool.space/tx/c7a9ad4877ee2971b649cb6e44a760d57371b51ddf5f3de5222d404556020d4b Stolen funds address (current balance ~0.69 BTC of stolen bitcoin): https://mempool.space/address/bc1qayw8nrec0vsa5vj4xee4dqhfgztx2gqq7w2u0s Tx moving funds that originated from Ocean out of the address containing hacked funds: https://mempool.space/tx/24f4b236bc47fc2ad85287e8636e9a14ba55e136ff3bf8b452f6d6b92d4e5187

mk4 getting hit now. dashboard updated with latest cluster including the tx from the mk4 that tomer reported. https://coldcard-hack-tracker.vercel.app/

2026 is going to be a long year 😵

some retard sent the attacker 42,069 sats just to tell them "5 BTC plz for cocaine and whores" https://mempool.space/address/bc1q3tl86ntgm5rs6xrqtffufn8f6thw0c69v4dj9q

coldcard hack tracker dashboard updated with galaxy research wave 3. they didn't publish the addresses, but i tried to find them myself. i think i found 221 of the 293 addresses they found. still running scripts to try and find the rest. https://coldcard-hack-tracker.vercel.app/

i vote to bring back the guillotine if they catch this fucker

imagine that plot twist. the movie about this is going to be insane. 😂

so you think the mining payout was stolen by the hacker? i was thinking the hacker received the mining payout and moved it to the wrong address by accident. the movement doesn't match how other hacked funds are moving.

added the ability to get a browser notification if funds start moving

Glow wallet from breez seems like a great wallet to onboard nostr users who are not using primal. It's non-custodial, provides a nostr enabled (supports zaps) lightning address, passkey login, and can even make USDT and USDC payments even though the wallet only holds bitcoin. Nostr client devs could probably even just give an AI agent the Breez SDK docs and the Glow repo and have it build a wallet with the same functionality right into their app. https://glow-app.co/

I noticed shortly after it happened cause some of the numbers updated on my dashboard while I was working on it https://coldcard-hack-tracker.vercel.app/

I made a dashboard to track the funds stolen in the coldcard hack based on what galaxy research reported https://coldcard-hack-tracker.vercel.app/

holy shit https://x.com/zherbert/status/2082993276324319713

save em. gonna be good items to have in a museum.

it's going to be a long night 😅

Dashboard updated with mk4 claim update 🙏

just saw reply from and it doesn't seem like a "move all funds now" type of situation like with coldcard

he's a well-known bitcoin dev