Latest / TFTC: A Bitcoin Podcast / #780: Dissecting The Coldcard Hack with Alex Thorn

Transcript

#780: Dissecting The Coldcard Hack with Alex Thorn · TFTC: A Bitcoin Podcast

• 0:00
  You've had a dynamic where money has become freer than free.
• 0:10
  If you talk about a Fed just gone nuts, all the central banks going nuts.
• 0:16
  So it's all acting like safe haven.
• 0:18
  I believe that in a world where central bankers are tripping over themselves to devalue their
• 0:23
  currency, Bitcoin wins. In the world of fiat currencies, Bitcoin is the victor.
• 0:28
  I mean, that's part of the bull case for Bitcoin.
• 0:31
  If you're not paying attention, you probably should be.
• 0:36
  Alex, the vibe has shifted from the last time we saw each other, which was a Thursday at the Galaxy event in D.C.
• 0:44
  Yeah, it was just shifting.
• 0:45
  I think you came maybe an hour before that PubKey event started and said there might be some issue with cold card.
• 0:55
  and I in my head I was like you know oh no but I was hosting that event so I got all
• 1:01
  tied up and I didn't realize that I didn't really see you the rest of the night until
• 1:06
  and then the next day I listened to your episode with James OB where you said that you were in a
• 1:13
  had to be in a corner on the phone the whole time which I of course now totally understand
• 1:17
  yeah pretty rough it's been a shitty week but uh I wanted to get you on because you and the team
• 1:24
  at Galaxy. I've done an incredible job of tracking the, um, the attackers. It looks like
• 1:32
  there's multiple waves of attacks of people, um, brute forcing private keys of those that were
• 1:38
  generated on cold card devices and contacting victims. And I think the knowledge you guys have
• 1:46
  gathered and the information that you've gathered over the last five days is important for people
• 1:51
  to understand what's going on.
• 1:52
  And so I have the chart here.
• 1:55
  Maybe we start there.
• 1:56
  Sure.
• 1:56
  Just what you guys have found
• 1:58
  based off of the information
• 2:00
  and the outreach they've gotten from victims.
• 2:02
  And I think you said so far, 94.
• 2:04
  Have you reached out to you?
• 2:05
  Yeah, it's in the mid-90s.
• 2:07
  I mean, it's growing.
• 2:10
  I mean, all the time.
• 2:12
  I mean, especially as I do,
• 2:13
  I did Nick Batia's show yesterday.
• 2:16
  I did Unchained yesterday,
• 2:18
  where, of course,
• 2:18
  I called for victims to not be ashamed. You did nothing wrong. You did not deserve this.
• 2:25
  Share. First of all, file police report. Well, first of all, secure. You haven't secured your
• 2:31
  funds on a potentially vulnerable cold card. Please do that immediately. But also share your
• 2:36
  drained addresses and the transaction IDs that drain them. I know, you know, it's hard for people
• 2:41
  to do it, but because I've been saying that people have been sharing and it's because of that sharing
• 2:47
  that we've been able to identify so many of the coins and where they are, what addresses they're sitting in.
• 2:54
  So, you know, it's also and sort of in exchange, although I don't think of it affected.
• 3:01
  Initially, I wasn't even doing it this way, but I can fulsomely trace anything in Bitcoin.
• 3:09
  I have a very powerful proprietary Bitcoin stack with some clanker sitting on top of it that helped me traverse.
• 3:17
  So I've been providing back like forensic reports to victims that they can then use to report to their local authorities, to the FBI,
• 3:26
  and that we can use as well to report to crypto exchanges and chain analysis and all that so that there's a chance that the funds get frozen.
• 3:34
  But please do continue to reach out and share those addresses with me so that we can keep building up the picture of the attack as it unfolds.
• 3:45
  And let's dive into the nature of these attacks.
• 3:49
  Obviously, it started late Thursday afternoon, early Thursday night.
• 3:53
  And I think it's become clear that AI was used to identify this vulnerability and then exploit it.
• 4:03
  And you can see that in the patterns of the waves of drainings that we've seen in the first wave.
• 4:09
  It seems apparent that the person who started draining the wallets of cold card users didn't really understand best practices or how to actually scope through a wallet.
• 4:23
  There was a very specific pattern to this first wave, correct?
• 4:26
  Yeah.
• 4:27
  So this pattern, I think they were the first.
• 4:31
  There's certainly where I learned of the pattern, which was the engineers at Block, Inc., obviously the guys behind Cash App, Aki, Spiral, etc., Square, right?
• 4:41
  They identified this pattern as a pattern, right?
• 4:45
  And a key piece of the pattern was a fixed 30 sat per V-byte fee on all draining transactions.
• 4:51
  That was substantially higher than the median fee rate at the time, which being higher than the median is not in itself that surprising.
• 5:01
  right? Attackers are willing to overspend to make sure they, you know, get the funds. But,
• 5:05
  you know normal people with urgent transactions don have many bursts of transactions from previously unknown addresses with a fixed fee rate right
• 5:17
  Like your wallet, your typical wallets will suggest fee rates, you know, if you want to confirm in this amount of time.
• 5:24
  Fee estimation is actually a big thing Bitcoin Core itself has worked on in core, let alone all the other wallets, right?
• 5:30
  So that was a key feature of pattern of wave one.
• 5:34
  This is the only pattern of coins we have very high confidence in are stolen due to this vulnerability that was solely based on a pattern.
• 5:45
  And so they identified this pattern.
• 5:47
  It was very mechanical looking.
• 5:50
  There's a lot about it that looks like it was designed and then executed by automation, I'll say.
• 5:58
  And there are other patterns that also look like that.
• 6:04
  Right. These aren't they don't all look like that, but many of them have features in the topography of the movements and the design of the transactions themselves, the fee rates that look automated.
• 6:19
  What in terms of where these these coins are going to, I think the first wave had a lot of address for use, too.
• 6:28
  Yeah, so waves one and two, in effect, there's almost a better chart that I tweeted earlier.
• 6:36
  Well, I have a chart of wave one as a perfect example, wave one alone.
• 6:41
  These are called Sankey charts, and they show fun movements.
• 6:47
  This is just the highest level overview chart, right?
• 6:51
  This shows the various waves.
• 6:54
  Waves one, two, and three are high confidence promoted.
• 6:56
  That's where people are getting this like 1356 type number.
• 7:02
  I've also promoted like a lot of what we call footprints A through N.
• 7:10
  Some of them are pattern matched.
• 7:16
  But what I should say is that wave one was designed and then later confirmed, but first designed solely by pattern matching from block.
• 7:25
  I took the pattern they described they saw. I set off across the entirety of not just confirmed blocks and their transactions, but also the entire UTXO history. So that's not the UTXO set. That's the UTXO set at every single state in Bitcoin ledger ever. Right. It's literally like 3.8 billion rows that I have.
• 7:49
  Yeah, so if you look at wave one here, this is all wave one.
• 7:53
  Now, like each of these four funnels, right?
• 7:56
  These are many addresses in each case being consolidated into four independent what we call collectors, right?
• 8:05
  They're collectors because they consolidate stolen funds into one step.
• 8:10
  And then that collector sent to three second hop holding addresses.
• 8:17
  And you can see for some reason, there's this little gray band that comes out of the first funnel here.
• 8:23
  That's not another secondhand.
• 8:25
  That's actually still sitting in the collector, but I put it on the right side here just to show that, like, the right side is where the funds sit.
• 8:32
  So this is actually a pretty typical looking siphoning topology or topography.
• 8:40
  I'm not sure which.
• 8:42
  I think people know what I mean.
• 8:43
  that you see in like other types of crypto hacks, right?
• 8:49
  It all gets drained immediately into an address the hacker controls,
• 8:52
  and then often they move it to like the proper setup that they want, right?
• 8:56
  Now, sometimes what you see,
• 8:59
  especially in a hacker determined to exfiltrate the funds,
• 9:03
  you know, into the fiat system
• 9:04
  or into whatever other chosen currency they want,
• 9:07
  then you start to see radical things like peel chains
• 9:09
  where they blow up the held coins into like,
• 9:13
  hundreds or thousands of different pieces. And then later they, they, you know, rejigger them
• 9:19
  into 20 pieces that don't look the same. They do it again and again, right. Just to make it really
• 9:24
  difficult to track. Um, also often they siphon them into like if stable coins are ever stolen,
• 9:31
  they often immediately transfer them into ETH, right? Because it's more immutable than the
• 9:35
  stable coin, um, or Bitcoin sometimes immediately get sent through Thor chain and then sent onto
• 9:41
  ETH and then sent through another bridge into this thing because bridges are harder to track funds
• 9:46
  through. Unlike those, all of the coins here in wave one are just sitting inert in these three
• 9:51
  addresses on the right. So they have not moved, right? And this is also true for waves two and
• 9:56
  three. But one of the other things that's interesting here about wave one, and I didn't
• 10:01
  in the thread where you pulled this, don't have the wave two. Wave two looks quite similar as well.
• 10:06
  and where it's many victim addresses consolidated into a holding address
• 10:11
  and then moved to a second address where they currently sit inert.
• 10:15
  That is a very clear pattern, right?
• 10:18
  Like wave three which is the other one that in that thread just maybe if you pull up as an example looks totally different And I will say also there is no co between waves one two or three attacker addresses
• 10:36
  There were co-spends between those bottom two funnels.
• 10:39
  So this is wave three. This is actually much more sophisticated.
• 10:44
  There is no common collector address. This is 293 chains.
• 10:49
  And by chains here, we mean like, you know, inputs like category groups of inputs.
• 10:54
  So three, 293 transactions funding, 293 staging addresses funding, 293 P2SWH vaults.
• 11:04
  Right. So each group of victim addresses was by itself moved into a staging one and then by itself moved into a vault, which could be a multisig.
• 11:18
  We wouldn't know until they spend transactions, but none of those have been spent.
• 11:24
  I think all but six of the 293 staging addresses only contained funds from one wallet.
• 11:34
  And now we can see that because of like co-spends of the wallets.
• 11:39
  And I also have a lot of victims that I've identified that are in these, right?
• 11:45
  And so the other thing is like wave one was a pattern that was described by block, which I expanded and later has been confirmed by many victim testimonies, reports.
• 11:55
  Waves two and three were identified by Galaxy Research solely by victim reports.
• 12:01
  Right. Like people started saying my coins were lost.
• 12:04
  And when I gathered like 10 from wave two or like 10 from wave three, it started to become apparent.
• 12:10
  It didn't actually take 10. It takes fewer than you realize, because once you get like two or three that look alike.
• 12:15
  You send the clankers off to look at all the blocks all around that and say, does anything else look like a bunch of addresses into a staging address into a, you know, paid a what script witness script hash was script witness that whatever into a vault.
• 12:29
  Right. Then you say, oh, my gosh, there's an entire burst of of transactions that look exactly like that.
• 12:35
  And that's how, you know. And then, of course, I start publishing about it.
• 12:40
  People start saying, I think I might be in wave three. They send me their stuff.
• 12:43
  If we get further corroboration, it becomes like high confidence.
• 12:47
  So, you know, one another interesting feature of one and two, I told you they look similar, right?
• 12:51
  Many victims into very few staging addresses, then into second hops where they're inert.
• 12:59
  The only two of one like of really there's a couple down talk about footprints, which are these smaller operators that have emerged.
• 13:06
  But there are a pretty sizable number of people who were drained in wave one that were not completely drained who were later fully drained in wave two.
• 13:15
  So there's a number of those that gives us some, I would say, medium to high confidence that wave one and wave two are the same attacker.
• 13:25
  Now, you know, someone could.
• 13:26
  And by the way, wave one, to your point, was all just after midnight, July 30th, UTC.
• 13:34
  So some people were like, oh, I was July 29th. And it was like, no, if you look, you were like, you know, West Coast, July 29th at night. That was actually early morning UTC, July 30th. We use UTC because that's like the default Bitcoin core and stuff. So it's just like easier to pick one.
• 13:50
  wave one happened in 41 minutes, very identifiable, right? Like you don't usually,
• 13:57
  because another big identifying feature is that not one of the high confidence, what I call
• 14:02
  promoted, meaning like we're saying these are drained, like these no longer a question,
• 14:07
  not one of those UTXOs was created before March 17th, 2021, when the, you know, cold card
• 14:13
  firmware bug was introduced. And I will say like, there's other patterns, like the median
• 14:19
  dormancy of all these coins is like four years. An enormous portion of the coins in waves one,
• 14:26
  two, and three, which are the majority still of high confidence victim addresses,
• 14:33
  the vast majority had never spent a coin. So these are just receiving coins,
• 14:39
  very indicative of people stacking sats into their cold card and in cold storage.
• 14:45
  so you know I think like there's co-spend which can help identify but again everything after wave
• 14:54
  one were patterned to the extent we found patterns there are some where I'm not seeing a pattern but
• 14:59
  I have a victim report it the one that I see it looks credible and drained and so we've
• 15:06
  incrementally added those two but also we found something like we're up to I think in the graphic
• 15:12
  the first graphic you showed, we're up to footprint N. That means we have multiple,
• 15:17
  the footprints are, we have multiple victims where the topography looks similar. They don't
• 15:22
  necessarily co-spend. A few of these co-spend, and so we're very confident and have promoted.
• 15:29
  But as you can see this graphic is everything that we haven yet confirmed This goes up well over 2 Bitcoin The shaded ones are I think not confirmed right by any owner right These are patterns that we found but haven yet
• 15:42
  gotten a confirmation at all. Some of those footprints are, they're identified by the fact
• 15:49
  that victims showed us. And we've, you know, said, is there anything else that looks like this? But
• 15:54
  we don't quite have enough confirmation that we should extrapolate it out to transactions that we
• 16:01
  don't actually have confirmed by a victim, right? Because there are plenty of transactions in waves
• 16:06
  one and two and three that we haven't actually gotten a victim report about, but we're very
• 16:11
  confident are part of the wave. So that's just up some background on the methodology that we've
• 16:16
  been doing. And just as background, like I have direct victim confirmation for about 400 Bitcoin
• 16:23
  of the 1500 or so that we currently call high,
• 16:28
  you know, value promote, promote.
• 16:30
  So a sizable amount have I've talked to.
• 16:34
  Yeah.
• 16:38
  It's so hard wrenching.
• 16:41
  Yeah.
• 16:42
  But I think explaining if you haven't,
• 16:44
  if you have a cold card,
• 16:46
  I don't care what your setup is.
• 16:47
  I mean, if you roll dice, you should be fine.
• 16:49
  But if you don't have confidence that you did it correctly,
• 16:52
  just get it off.
• 16:53
  I agree. Yeah. And I want another important thing to say, but again, and I have a cold card MK3, I believe with no password and no dice in a multi-sig quorum that cannot reach signing threshold. So it really can't be affected at the moment. And in that quorum, I've never spent. So there, the address isn't known to hold coins on chain, for example, because it's, you know, like a, it's a script hash address.
• 17:23
  that has never revealed its script, right?
• 17:26
  But I, and I haven't,
• 17:28
  because I know that that isn't vulnerable at the moment,
• 17:31
  I haven't actually rotated the cold card out yet,
• 17:34
  but I absolutely will.
• 17:36
  So, and I will say,
• 17:38
  I haven't updated this analysis since like midday yesterday,
• 17:42
  but I can say in waves one, two, and three,
• 17:44
  for sure there are zero multi-sigs identifiable.
• 17:48
  So as far as I'm concerned,
• 17:49
  there's no evidence that any multi-sig setup
• 17:51
  has been breached here. Now, of course, if you had like say a two of three multi-sig quorum
• 17:58
  where two of three are cold card MK3s like mine with no passphrase and no dice roll,
• 18:05
  that is vulnerable. I haven't seen one instance yet of it being attacked. It's probably,
• 18:11
  you know, Rob Hamilton and the red team working on this is probably more, and James OB are probably
• 18:17
  more apt to actually talk about that, but I understand that's probably lower on the tier
• 18:23
  of priorities that the black hats are looking at to search namespace for. It's more complicated.
• 18:29
  But all that being said, I am of the view that anything on a cold card at all, including my
• 18:36
  sub-threshold quorum key, should be rotated. I mean, there's just no reason to stick around if
• 18:45
  you have any doubt whatsoever, in my opinion.
• 18:46
  What's up, freaks? This rep was brought to you by our good friends at Square. If you run a business,
• 18:51
  you need payments. You need hardware, you need software, invoices, point-of-sale tools,
• 18:54
  and a system that does not turn every basic operational task into a headache. Square spent
• 18:58
  years making it easier for small businesses to get paid and keep moving. And now, with Block
• 19:03
  leaning deeper into Bitcoin, Square sits at an important intersection. Real-world merchants,
• 19:08
  payment infrastructure, and the future of Bitcoin commerce. We're making Bitcoin everyday money,
• 19:11
  freaks. You are starting or upgrading your business setup. You can get up to $200 off Square
• 19:16
  hardware at square.com slash go slash TFTC. All right, freaks, you know, I don't take sponsor
• 19:22
  money from products. I wouldn't use myself. So listen up. The Avon Bitcoin Visa card is one of
• 19:25
  the most interesting things I've seen in the Bitcoin lending space in a long time. Here's the
• 19:29
  deal. You can get a line of credit up to a million dollars backed by your Bitcoin without selling a
• 19:33
  single sat. No games, no annual fees, no minimum draws. And your Bitcoin is custodied by Bitco,
• 19:39
  one of the most trusted names in digital asset security. Avon never lends it out. There's no
• 19:43
  rehypothecation, you stay in control. You can lock in a fixed rate for up to 10 years. 10 years,
• 19:49
  that's 10 times longer than most lenders out there. We'll go interest only for up to five years.
• 19:54
  Rates start at 8.99% APR. For a product that lets you keep your stack and still access liquidity,
• 20:00
  it's hard to beat. On top of this, that's what, you also get 2% unlimited cash back every time
• 20:04
  you use the card. Spend fiat, keep your Bitcoin, that's the whole game. If you've been stacking for
• 20:09
  years and need liquidity without triggering a taxable event this is worth a serious look go to
• 20:14
  aven.com slash bitcoin that's aven.com slash bitcoin check it out yeah it's a timing thing
• 20:23
  that i mean bringing this back to the waves um obviously waves one and two at a very specific
• 20:28
  pattern but that is the game theory at play right now it's just a ticking time bomb if you have
• 20:34
  private keys generated with the affected versions of the firmware which started being released in
• 20:42
  march of 21 so i think version 4.0.0 and beyond are affected different models have different
• 20:50
  levels of entropy. Older models, I think, have more, pretty confident of more entropy,
• 20:56
  but still not a sufficient amount of entropy to protect you from a brute force attack. So
• 21:00
  move your coins if you haven't already. And the game theory is such that once
• 21:04
  the alarm bell was sounded last Thursday and it became obvious that this was exploitable,
• 21:09
  you just have to assume that other actors are going to enter the fray to try to exploit this
• 21:15
  too so the time bomb could be accelerating the pace of the clicking ticking of the talk can be
• 21:22
  accelerating so move with haste um and i think that's another weird factor that's entered the
• 21:30
  conversation too is there's i mean i've been listening to spaces and following this discussion
• 21:35
  since thursday night on the train right back people were already talking about this because
• 21:39
  So you had people like Wicked Bitcoin, Portland HODL, Rob Hamilton, Praveen,
• 21:44
  basically downloading the scripts to brute force private keys or seed phrases on their computers.
• 21:53
  And they were able to identify wallets and the ethical conundrum of do we sweep this as white hat hackers into addresses that we control and hope that we can get this back to.
• 22:02
  The original owner, that conversation started pretty early Thursday night.
• 22:06
  I think there has been confirmation that some people have engaged in white hat sweeping of these coins, but it gets into the, again, the ethical dilemma, but then the logistics of even if you do that, how do you get the coins back? And I think that's another important detail.
• 22:22
  Well, if there is a scenario in which we identify the attacker
• 22:31
  or white hats have swept funds and they want to return them,
• 22:35
  I think the ability to prove that you were the individual
• 22:40
  that actually created the private key initially
• 22:43
  depends on you actually having your physical device.
• 22:48
  Yeah, and you mentioned a couple people there too.
• 22:51
  You got a shout out to Wicked.
• 22:53
  Wicked.
• 22:54
  I think, what is he?
• 22:55
  Wicked Smart Bitcoin?
• 22:56
  Is that?
• 22:56
  And he doesn't even say that anymore.
• 22:58
  But that guy's been doing like spaces, just helping people do, you know, answering Q&A on self-custody at the most granular level.
• 23:07
  I have literally listened to him help dozens of people like move coins off their gold cards live.
• 23:14
  Reminds me of the old clubhouse days a bit.
• 23:17
  what um because i know you identified somebody i forget from which wave that sent it to
• 23:23
  a casino yeah this this one was pretty ugly like um not from waves one two or three
• 23:31
  those coins are inert they're not they haven't moved right and those are the key ones that we
• 23:36
  were watching um because they comprise the largest share of the known stolen coins one two and three
• 23:43
  yeah there was a victim that we traced and that i think seven or ten of their 17 bitcoin was
• 23:52
  instantly moved to thor chain which is a cross chain dex that lets you effectively send bitcoin
• 23:59
  into a multi-sig controlled by their validators and you can put an ethereum address for example
• 24:05
  and a trade order in an opera turn and then they spit out the equivalent eth on the other side
• 24:12
  in Ethereum. And so you enter your Ethereum address in the hop return, plus some other
• 24:17
  instructions about the trade that you want done. Luckily, the way it works is it's pretty easy to
• 24:24
  trace through there, at least in my limited experience tracing. And then it's a matter of
• 24:30
  using the Etherscan API to follow where it goes. And Etherscan has a lot of deposit addresses for
• 24:37
  exchanges and services labeled. These were something like, I don't know, $450,000 worth of
• 24:45
  the Bitcoin now ETH was deposited in an offshore casino that I'd never heard of called dual.com.
• 24:53
  And so I told the victim this and gave instructions on how to send a preservation
• 24:59
  request and a freeze request to the casino.
• 25:03
  And this was like at 1 a.m. on Sunday morning, so like late Saturday night, Eastern time.
• 25:10
  And they did get a response and it was like, we're not going to freeze until we get a police
• 25:15
  report demanding the freeze.
• 25:16
  And I found that to be offensive because it was midnight on weekend.
• 25:23
  There was literally zero chance that a police report was going to be sent anytime soon.
• 25:29
  And I thought the prudent measure for any sort of financial institution when receiving a credible cryptographic forensic report effectively proving that the funds emanated from a stolen address would be sufficient to just take the coins from the casino depositor.
• 25:53
  I saying don allow them to be withdrawn right until an investigation is complete I guess they declined to do that though They did promise me via DM that they would preserve the information about it which you know and I don know what jurisdiction this dual is actually registered in or if they are
• 26:12
  but that may be all that's required.
• 26:15
  And, you know, they wrote back on X that it was unreasonable to demand solely based on a report
• 26:22
  that their customers could not withdraw.
• 26:24
  all, it is an interesting thing about, it raises a lot of interesting ideas. One is that, you know,
• 26:32
  I have the victim report. The victim can prove they do possess the keys. But the nature of this
• 26:39
  exploit is that they are not the only one who now possesses the keys. And eventually, everyone
• 26:48
  might possess the keys to all of these coins, right?
• 26:52
  And that's tricky.
• 26:54
  That's one reason why we really encourage people
• 26:56
  to formally file victim reports with the local police,
• 27:01
  the FBI's IC3, Canada's Anti-Fraud Center,
• 27:05
  the Royal Canadian Mounted Police.
• 27:09
  I've got a whole list, by the way,
• 27:10
  if people need to know who to contact in their jurisdiction.
• 27:13
  These exist all over the world, right?
• 27:15
  Some of them share information with each other and all that.
• 27:18
  is to establish victimhood early because there could be a time if funds are recovered where many people use keys to claim that they're theirs, right?
• 27:25
  And it becomes a whole cluster.
• 27:27
  That's why I also tell people not to destroy their cold cards even after they've moved funds off of them or had their funds drained
• 27:33
  because there might be forensic evidence on the cold card that can be used to establish that they're the primary owner in the chain.
• 27:42
  And another thing that it raises is the question of hold authority.
• 27:48
  This came up once recently with a hack, a DeFi hack, and I'm forgetting which one it is.
• 27:58
  There's been many where ZaxxBT and others notified very early to Circle that funds were being exfiltrated and bridged over Circle's sort of, I think it's called CCTP, cross-chain stablecoin bridge,
• 28:16
  which is an interesting version of a bridge, by the way, that's more secure than some of the lockup funds on one side,
• 28:22
  reissue them on the other, because it goes through Circle, but it goes through Circle.
• 28:26
  So Circle is the issuer of USDC, just cancels them on one chain and reissues them to you on the other,
• 28:32
  which is actually safer in a lot of ways because it's not like locking them up to create a honeypot on one side of the chain,
• 28:40
  which is how so many DeFi bridges are exploited.
• 28:43
  anyway they didn't they'd circle declined to stop this even though they'd been warned for like six
• 28:48
  hours loudly on twitter that this was happening and they said that they needed what was called
• 28:52
  hold authority um this is now in clarity this idea of hold authority it says that you know if you
• 28:59
  credibly know that or have reports that there's you know this type of fraud whatever going through
• 29:04
  your centralized platform you you can hold it uh freeze it on your platform for some amount of
• 29:12
  time, I think in clarity, it's 48 hours while you investigate and you are totally immune from civil
• 29:18
  liability. So I understand, you know, I think there's an argument to be made in the case of
• 29:22
  the duel.com with this one that I talked about, like, you know, are they worried about being sued
• 29:27
  by their client who they promised, you know, their user, you know, instant withdrawals? I,
• 29:32
  you know, I get that it's a little tricky, but I'm becoming a little bit like, you know,
• 29:37
  Tevano, if people follow her, who used to was like head of security at Metamask and had my Ether wallet.
• 29:43
  Big, big, I think, participant in the SEAL rapid response crypto hacks team.
• 29:49
  She is just zero patience for this type of behavior.
• 29:52
  And just the more people I've talked to from the cold card hack and seeing this type of thing and just like knowing the funds are there and not being able to get them to act is incredibly frustrating.
• 30:05
  So, yeah, we haven't, I got to say, the vast majority of coins, we have not seen that type of exfiltration behavior from.
• 30:15
  Maybe there's luck.
• 30:16
  Maybe they do have KYC at dual.com.
• 30:19
  And, you know, with the police report, maybe they'll be able to identify that hacker.
• 30:24
  But that's the other part of the story, Marty.
• 30:27
  That is definitive.
• 30:28
  Well, it could also be, but very doubtful.
• 30:30
  So I would say definitively not the same hacker from Waves 1, 2, and 3.
• 30:36
  Well, didn't Block report that Waves 1, 2, and 3, the hacker was obviously using some chain analysis tool that was a paid service?
• 30:45
  Yeah, I think this is Wave 1 in particular, which is the one that they really blogged about where I got that first pattern to work with.
• 30:52
  they said that, and I don't know how they figure this out,
• 30:56
  but I think Clay from Block said that they,
• 31:01
  from BitKey, I believe, right,
• 31:03
  said that they confirmed this
• 31:04
  with the blockchain infrastructure provider.
• 31:08
  I don know the details but what I do know and what they said was and what I assume is a blockchain infrastructure provider is like a in this case a party that you can connect to their RPC right
• 31:24
  And pull blockchain data from. Potentially for many chains, right? They have APIs or RPC providers.
• 31:30
  There are many of these, to be clear. It's a great service, especially for, you know, blockchains
• 31:35
  like Ethereum and Solana, which are even more cumbersome to run than Bitcoin, right?
• 31:41
  Many people use these for many, obviously, to be clear, obviously, totally legitimate
• 31:44
  reasons.
• 31:45
  But somehow, Block said that they had identified that the same entity they believed to, this
• 31:51
  pattern they observed that, what I now call Wave 1, had queried, like, I guess, a lot
• 31:59
  of the addresses that they ultimately attacked through this blockchain provider, and that
• 32:03
  in talking with the blockchain provider, they learned that this entity had used a paid account
• 32:09
  at the blockchain provider. So I think this is very promising as potentially the ability and
• 32:16
  that authorities have been notified. So potentially the wave one attacker could be identified. And
• 32:23
  that could be very, very promising, you know, knock on wood. I don't want to, you know,
• 32:28
  get ahead of ourselves here but um you know you know say run your own node verify your own
• 32:35
  transactions in the blockchain apparently wave one hacker did not do that so even though it would
• 32:41
  have been pretty trivial to do so yeah he didn't spin up his own node and that i mean that that
• 32:46
  begs the question too like what what can these attackers do now if they have the coins obviously
• 32:51
  you mentioned like thor chain and split there are things i i think yeah i've seen some bitcoiners who
• 32:56
  aren't as, haven't, you know, followed or been as close to like, most of these hacks are like
• 33:02
  centralized exchanges or like smart contracts and DeFi, right? Historically, bridges, DEXs,
• 33:08
  obviously centralized exchanges, you know, many such instances.
• 33:15
  It doesn't happen very often in the Bitcoin ecosystem directly outside of centralized
• 33:21
  exchanges because there is no DeFi on Bitcoin, right? It's a pretty simple protocol, which
• 33:26
  makes it a lot more secure, in my view, at the protocol level than many of these others,
• 33:31
  which are much more complicated. And it doesn't have the generalized scripting that others do.
• 33:37
  So you don't have people creating novel new programs and stuff like that. Multisig is native
• 33:42
  on Bitcoin, whereas it's not on Ethereum, et cetera, et cetera. So people have been saying,
• 33:47
  well, what can they do? We can track it everywhere. The hackers can themselves be
• 33:53
  expert money launderers. They can pay money launderers. These people exist. They have
• 34:00
  methods. It is possible for them to exfiltrate these coins. It is hard. It's definitely hard.
• 34:07
  There are mixers and tumblers in the Bitcoin world that they could use, but those are very
• 34:14
  watched targets by law enforcement. You can bridge to another network that has privacy protocols.
• 34:22
  Right. The fact that the one we talked about, the one to dual dot com didn't go through like tornado cash first on ETH before going to dual dot com is surprising.
• 34:30
  Suggests they really were not very sophisticated, even even though this attack seems so sophisticated and it is pretty sophisticated.
• 34:38
  That shows you like how it's degrading, like waves one and two and three are more sophisticated.
• 34:43
  And who knows why they're sitting inert on Bitcoin?
• 34:46
  I can tell you it's not because it's impossible for them to exfiltrate the funds, but it is difficult to do so without getting caught.
• 34:54
  And that is a silver or potential positive that it isn't easy, but I would caution, don't hang your hat on that.
• 35:06
  It is possible to launder money out of Bitcoin.
• 35:09
  Freaks, look at me.
• 35:09
  I'm glowing.
• 35:10
  I've got like an angel's halo going around me.
• 35:13
  You know why that is?
• 35:13
  I feel good.
• 35:14
  I feel taken care of.
• 35:15
  I feel blessed, healthy, happy.
• 35:17
  And that is because I'm a CrowdHealth member.
• 35:19
  My family and I have been CrowdHealth members for five years now, literally this month.
• 35:23
  Five years ago, we joined CrowdHealth.
• 35:24
  We've had two babies.
• 35:25
  We've had multiple health events, and we're never going back to health insurance.
• 35:29
  CrowdHealth is crowdfunded healthcare.
• 35:31
  So you sign up for CrowdHealth, you pay a monthly fee, you help out with other people's bills.
• 35:37
  And it's significantly cheaper than health insurance.
• 35:40
  We were on COBRA.
• 35:40
  It's a family of three.
• 35:42
  When I left my last job before I went full-time with CFTC,
• 35:45
  went on the crowd health. Now as a family of five, we pay, I believe $700 a month. It's significantly
• 35:52
  cheaper. They're going to negotiate prices lower for you. They've consistently negotiated healthcare
• 35:57
  prices as much as 50, 60, 80%. In many cases, they help out with babies. If you have a pregnancy,
• 36:03
  you pay the first $3,000 and the crowd covers the rest. If you have a regular health event,
• 36:09
  you pay $500 and the crowd pays the rest. Go to joincrowdhealth.com. Sign up today,
• 36:13
  use the code TFTC, opt out of health insurance. I'm an insured baby and I love it. Use the code
• 36:18
  TFTC at joincrowdhealth and you get a month for the first three months that you on the CrowdHealth platform in the community Bitcoiners you found sovereign money now find sovereign health and sovereign healthcare What up freaks When you take Bitcoin seriously you start with custody You want to control your keys avoid single points
• 36:36
  of failure, and make sure your savings cannot disappear because you or someone else screwed up.
• 36:39
  That is what Unchained has been focused on since 2016. Unchained is the leader in collaborative
• 36:43
  multi-sig custody and Bitcoin financial services that keep you in control. They secure over $12
• 36:48
  billion dollars in bitcoin for more than 12 000 clients that means about one out of every 200
• 36:52
  bitcoin sits inside an unchained vault their model is simple you hold two keys they hold one key it
• 36:57
  always takes two keys to move bitcoin meaning their single key can't access your bitcoin on its own
• 37:01
  just resilient shared custody that gives you institutional grade security while keeping you
• 37:05
  sovereign unchained also lets you trade straight from your vault access bitcoin-backed commercial
• 37:08
  loans open a bitcoin ira where you hold your own keys and set up personal business trust or
• 37:13
  retirement vaults. They even offer inheritance solutions built for long-term hodlers. Or opt for
• 37:18
  the highest level private client service with Unchained Signature and get a dedicated account
• 37:22
  manager, discounted trading fees, exclusive access to events and features, and much, much more.
• 37:26
  If you want a partner that helps you secure and grow your Bitcoin without giving up control,
• 37:30
  go to unchained.com and use the code TFTC10 at checkout to get 10% off your new Bitcoin
• 37:35
  multisig vault. That's TFTC10 at unchained.com. I mean, there's been a massive reaction. Obviously,
• 37:40
  you and your team are tracking this but it seems like um there has been somewhat of a immune response
• 37:48
  to not only obviously for um cold card victims but it has incited this urgency across the industry
• 37:57
  to begin auditing every system and that's yeah something that's been fascinating to watch unfold
• 38:03
  over the last five days is the speed with which um rob hamilton the new ceo of bitcoin and uh
• 38:10
  the red team that are working on, um, uh, basically auditing as many projects as possible,
• 38:18
  um, are uncovering, I mean, they haven't disclosed any, but, and Rob did come out and
• 38:23
  confirm that all the vulnerabilities that they have found so far do not put funds at risk
• 38:29
  immediately. Um, or funds at risk at all. I believe he said, um, don't quote me on that.
• 38:35
  double check that but uh i think it's i said this yesterday on rhr like by no means
• 38:44
  is this something that uh this cold card hack um this cold card vulnerability was human error
• 38:52
  um it seems like ai was used to discover from these these attackers and they've exploited it
• 39:01
  but there have been reports of others in the past that we've all been made aware of now
• 39:06
  that were reporting that they had collisions and their coins were getting out there.
• 39:12
  So this has objectively been possible for five years.
• 39:18
  It seems like there were some users reporting that they went to their wallet and funds were swept.
• 39:24
  Maybe that wasn't an attacker.
• 39:26
  It was just a coincidence of somebody creating a private public key pair using a cold card and sweeping the funds once they noticed there were some there already.
• 39:36
  But AI is a very, very big and is becoming a larger sub theme to all this, both the exploit side and the reaction to it as well.
• 39:47
  Yeah, absolutely. And it's worth noting, I think, and I'm not going to cite any of the names because I forget them, but bugs in the entropy, random number generators in crypto wallets have existed before and have been found without AI.
• 40:01
  so it's not that
• 40:04
  AI was needed to find
• 40:06
  this bug
• 40:08
  in the implementation
• 40:09
  of Coldcard's random
• 40:12
  number generator but it is pretty
• 40:14
  likely that it was used and it's definitely
• 40:16
  being used by attackers to
• 40:18
  operationalize the vulnerability
• 40:19
  Rob and the red
• 40:22
  team there's a bunch
• 40:24
  of efforts going on right I'm focused on
• 40:26
  on chain tracing of funds because
• 40:28
  that's what I'm good at
• 40:29
  Rob and many others are just burning tokens, like evaluating, doing code review with Frontier Cyber enabled models, but also like Kimmy and GLM, the open source models.
• 40:44
  I'm like basically anything they can get their hands on in the Bitcoin community.
• 40:48
  So other hardware wallet code bases, like libraries that underlie important Bitcoin infrastructure, like everything you can think of, which is a huge effort.
• 40:58
  There's also, like we said, people like Wicked literally helping individuals migrate coins.
• 41:03
  There's people that are trying to replicate the attack in order to determine how many addresses are still at risk.
• 41:11
  And you need substantial compute for that.
• 41:15
  People are chipping that in.
• 41:16
  There is a huge immune response from the Bitcoin community in reaction to this exploit.
• 41:22
  But to your broader point, Marty, about attacking and defending with AI, that's been a huge problem, right?
• 41:31
  Like, you remember there's the opening.
• 41:33
  I know you guys covered this, the open AI lab leak that hacked into Hugging Face, which itself is an AI.
• 41:39
  model repository, Hugging Face said they couldn't use frontier models to defend themselves.
• 41:45
  They kept hitting all the cyber safeguards.
• 41:47
  And so they had to fall back on Chinese open source models.
• 41:50
  To me, the idea that American companies have to rely on Chinese AI models to defend themselves
• 41:58
  is absurd.
• 41:59
  And something needs to give here.
• 42:01
  I don't know if it's just the sort of safetyism emanating from the frontier labs or if it's
• 42:09
  reaction to the US government's midnight phone call to Anthropic that halted the release of
• 42:15
  Mythos. But something needs to change. And I wrote this on X. To the extent that I have any reach,
• 42:26
  I'm escalating that to the highest levels I have access to because it's absolutely insane.
• 42:31
  Even myself, I primarily am using cloud code and codex and even asking again on a database that's local of Bitcoin data, which is public.
• 42:44
  Right. Even saying, hey, I have a report from a victim that they were drained, you know, in this transaction ID.
• 42:50
  Can you like pull the transaction information out of my own computer?
• 42:55
  And I'm hitting Fable 5 safeguard and getting downgraded to Opus.
• 42:59
  right like it's insane it's just insane um something's got to give here no it does to think
• 43:07
  that i mean it's a try i mean it's something that we've been saying in bitcoin just in the concept
• 43:14
  of like trying to throw kyc aml restrictions on bitcoin bring it to the chain level or prevent
• 43:21
  people from accessing privacy preserving tools it's like well yeah you can you can try to prevent
• 43:27
  people from using Bitcoin in a peer-to-peer fashion or using it in a private way, but
• 43:31
  criminals don't care. They're going to use it that way no matter what. They're criminals because they
• 43:36
  do not have a high regard for the law in the first place.
• 43:40
  When it comes to this discussion around AI
• 43:43
  and defending against attacks and being proactive to
• 43:48
  secure your systems and make them more robust from a security
• 43:52
  posture, it's insane that we have to fight this battle,
• 43:56
  particularly in the U.S. right now.
• 43:58
  Everybody's using Kimmy.
• 44:00
  I believe Gwen came out with a new model just yesterday that's in the mix.
• 44:04
  I think the red team, I saw Rob or Callie say that they did get access to OpenAI's
• 44:12
  sort of edge enterprise frontier model.
• 44:16
  Yeah, and I can just say I know of some big crypto companies
• 44:21
  that have access to either Glasswing or OpenAI Frontier Cyber Models
• 44:27
  and have been doing work on code-based review and vulnerability reporting,
• 44:31
  responsible disclosure stuff like that and stuff that also helps Bitcoin And also I think there I don know if it pronounced like this you know when you only read something you never heard it said out loud Project Lupe is an open source like LLM security vulnerability project
• 44:49
  And I don't know who runs it, but I know Steve Lee is involved.
• 44:52
  And they're also working on this.
• 44:54
  So there are a lot of efforts.
• 44:56
  It's not just Bitcoin or even blockchains.
• 44:59
  Like this is a global question.
• 45:02
  Like every company needs to upgrade. We're in an arms race right now. I do think like it's going to be episodic and we'll get to a, you know, it'll plateau where the defenders have caught up to the attackers. And so there's a little bit of a detente.
• 45:19
  I think governments will impose some actual like pausing and safeguarding as these things get better and better for better or worse.
• 45:30
  I think they will. Even I think the Chinese government will eventually not allow like the most dangerous because, you know, the open source models can be used by their people as well.
• 45:39
  And so, like, I think you'll see. But we are definitely still in early innings where it is like attackers are outpacing defenders.
• 45:46
  And so defenders, and by the way, that's true for every weapon on Earth.
• 45:51
  You know, like the Mongols defeated whomever because they had horses.
• 45:54
  They were shooting arrows from horses that had never been seen before, right?
• 45:58
  Like we're kind of in that era, right?
• 46:00
  Like the American Revolution, they kind of invented guerrilla warfare.
• 46:03
  And that was overwhelming to the British's column warfare.
• 46:06
  So we're still in that stage, but I think it'll be episodic where you reach plateaus
• 46:13
  And then who knows, maybe step function increases cause another episodic arms race and blah, blah, blah.
• 46:19
  But we're definitely still in a period where the defenders don't have access to good enough defensive tools.
• 46:24
  I don't think.
• 46:25
  No, I mean, obviously, Bitcoin is being affected right now.
• 46:31
  But there was a report out of Minneapolis, I believe, or Minnesota a couple of weeks ago about a water treatment plant being affected by some virus and shutting down.
• 46:40
  If you think of how antiquated the software around grid systems are today, energy systems, this is, I mean, when it comes to the broader discussion about getting access to frontier models to people that need to defend these systems, I think it's an imperative.
• 47:00
  It is a national security issue at this point.
• 47:03
  Yeah, it is.
• 47:05
  And I have to say, like, I don't have the answer on what the policy should be exactly.
• 47:13
  I just know that current status quo isn't good enough.
• 47:17
  No.
• 47:18
  I know you got to jump here.
• 47:19
  Thank you for taking some time to hop on.
• 47:22
  I really wanted to get you on so that anybody who may be a victim out there isn't aware of the research that your team is doing and the data gathering.
• 47:31
  Yeah you can see we publish a fair amount on GLXY research on X but so you can get all the info on how to contact me and us through that but that accounts DMs are not open so you can DM me on X at intangiblecoins
• 47:49
  I would love to help. And Marty, I just wanted to say thank you for being in this community.
• 47:56
  I know it's been a really tough time for, you know, you guys as longtime users of ColdCard as well.
• 48:04
  I've used ColdCard.
• 48:05
  I think the first rap I ever did on Galaxy Brains had a line about using ColdCard keys because we hold hard cheese.
• 48:13
  So and also I've been explaining this attack to journalists, to institutional investors who are interested but not affected because, you know, they use custodians and stuff like that.
• 48:26
  And one of the things I've been saying about why this is so demoralizing and such a tragedy, though I believe anyone having their money stolen for basically any purpose is terrible, is that these victims didn't do anything wrong and they didn't even do anything risky.
• 48:46
  In fact, if like I said, the vast majority of the coins being stolen, their addresses had never spent their coins and they'd only received.
• 48:57
  And the average of the median dormancy of the coins being stolen is like three point eight years.
• 49:04
  These are long term DCA Bitcoin believers, the cultural demographic of people that use CoinKai.
• 49:13
  I mean, I've got a block clock over my shoulder the last 250 episodes of Galaxy Brains.
• 49:19
  The people that use these are largely the most philosophical believers in Bitcoin.
• 49:25
  And this sort of strikes at the core of the self-custody, you know, work hard and save in Bitcoin.
• 49:33
  You know, again, nobody deserves to have their money stolen.
• 49:36
  But these people didn't put their coins on a shady crypto exchange to speculate.
• 49:41
  They didn't accidentally, which, you know, leak their coins, didn't drop their hardware wallet unlocked on the ground.
• 49:49
  They didn't accidentally upload their seed phrase.
• 49:51
  Not that those, you know, those are mistakes, but these people didn't make any mistakes.
• 49:57
  And that's what makes it so upsetting and why people are worried about sort of the future of the self-custody movement.
• 50:05
  And I would just say self-custody is not dead.
• 50:07
  This was a poorly implemented thing.
• 50:09
  Random number generators do work. They are proven to work. This one is not proven to work. And that's why Rob and the red team and many others, Portland and Calais and others who are helping are so essential.
• 50:23
  I think the wake up call for us in the Bitcoin world is that you know verifying and auditing codes not like a checkbox like it something we got to be doing you know 24 7 365 But I personally do believe this will damage the single SIG
• 50:43
  keep your hardware wallet under the bed and put your seed in a seed plate. I think the future of
• 50:48
  self-custody is multi-SIG collaborative custody. I do believe that firms like Casa and Unchained
• 50:53
  and Nunchuck and the Miniscript-based ones like Liana Wallet and Anchor Watch and others. I'm
• 51:00
  Sorry if I'm forgetting others.
• 51:01
  There are ways to provably and to really diversify the exposure to hardware wallets or specific key generation mechanisms that might sound difficult when I say multi-sig collaborative custody.
• 51:14
  But actually, there are many strong companies that provide this as a relatively cheap service.
• 51:19
  So, you know, if you are hellbent like I am in doing self-custody, look into those.
• 51:25
  I think we need to be a lot more deliberate about the risks that people take.
• 51:32
  I do think telling people to roll 100 dice is just not going to work for the majority of people.
• 51:38
  But there are easier ways.
• 51:40
  You don't have to be permanently demoralized about self-custody.
• 51:45
  I agree there.
• 51:46
  I'm not going to give any advice at the moment.
• 51:49
  But I think the only advice I will give is if you have a cold card, if you're for some reason just becoming aware of this, just move.
• 51:55
  your funds ASAP. Alex, thank you, brother.
• 52:01
  If you aren't following Alex and the team at Galaxy Research,
• 52:04
  if you're a victim, make sure you're following them. Make sure you're reaching out. Again, I think
• 52:08
  police reports, if there is a chance of recovery of funds,
• 52:13
  having that police report and holding onto your device will be
• 52:16
  critical. So make sure you follow that advice. And this is
• 52:20
  obviously a developing situation. So make sure you follow the teams
• 52:25
  that are on top of this, which Alex and the team at Galaxy is very much on top of this right now.
• 52:29
  Thanks a lot, Marty. Good to be here. Yeah. Please reach out if you're affected.
• 52:34
  Peace and love, freaks.
• 52:35
  Thank you for listening to this episode of TFTC. If you've made it this far,
• 52:39
  I imagine you got some value out of the episode. If so, please share it far and wide
• 52:44
  with your friends and family. We're looking to get the word out there.
• 52:48
  Also, wherever you're listening, whether that's YouTube, Apple, Spotify,
• 52:52
  make sure you like and subscribe to the show and if you can leave a rating on the podcasting
• 52:59
  platforms that goes a long way last but not least if you want to get these episodes a day early and
• 53:05
  ad free make sure you download the fountain podcasting app and go to fountain.fm to find that
• 53:11
  five dollars a month get you every episode a day early ad free helps the show gives you
• 53:18
  incredible value. So please consider subscribing via fountain as well. Thank you for your time.
• 53:24
  And until next time.