Post

Looks like Coldcard was a state-backed, inside job spanning multiple years of careful planning. The revelation of earlier tweets like the one below heavily suggests that this was long premediated by Coldcard insiders. The heist was optimized around max public shock value and minimum discretion. Given all the facts, we must answer: - Why did the attacker completely disregard privacy by consolidating stolen coins into a single address? - How did the attacker, who clearly planed this for a long time, fail to plan to cover their own tracks? - Why did the attacker use KYC'd service providers? - Why did Coldcard make these "wink-wink easter egg" posts about this exact bug around the same time the bug first appeared in the code base? - If it was merely a "retirement attack," why not exercise discretion so you could actually retire? - Why did the timing line up with major politically relevant developments like CLARITY and a bear market? The only theory that answers all these questions well is a state-backed operation involving Coldcard insiders. It was never about the money. It was about attacking self custody, one of the core premises of Bitcoin. I did not want to make this accusation initially even though I did suspect it. Now the evidence is on my side so I am adding the insider point to the theory. The folks who think there is no conspiracy need to answer some hard questions: If you think it is a script kiddie using an open source LLM like Kimi, you need to answer why he would do this but not ask Kimi or Google how to cover up his tracks despite planning at least for a few months. If you think it was a random Bitcoin hater who doesn't care about the money, you need to answer why Coldcard put out these clearly suggestive tweets at the same time. (Note: you can say coincidence, that's your right). Skeptics: I would love to hear your answers! For me the inside job theory squares all the corners and also explains the company's actions over the last few years. - Antagonizing security researchers -> less visibility into code - Discredit competitors -> cause confusion - Heavily fund the marketing engine -> draw in the hardcore Bitcoiners; promote a strong brand association with self custody - All these easter eggs + NVK hating plebs -> mock the would-be victims and create learned helplessness All of this comes together really well to the mess we have today.