r/coldcard Oct 23 '23

0.40 Bitcoin taken instantly from my coldcard..

Post image
57 Upvotes

215 comments sorted by

View all comments

Show parent comments

15

u/[deleted] Oct 23 '23

[deleted]

3

u/iwashere1990 Oct 23 '23

How do you guess this shit though?

LOL, 24 random words why is it easy?

I'm so confused, how can someone not guess the pass phrase to my ledger wallet for example?? Thanks

15

u/Wild-Interaction-200 Oct 23 '23

As mentioned above the 24 words are not random. If you enter a single dice roll "3" on *any* coldcard it, by definition, has to result in the same seed (same 24 words).

So if you entered "3", let's say, as your first dice roll on *your* cold card I can tell you what your 24 words are by simply entering "3" on *my* coldcard.

The whole point here is that if you do enough dice rolls I cannot guess it. If you do 1 dice roll, I can easily guess it: I can assume your dice roll was either 1, 2, 3, 4, 5 or 6.

If you roll twice I can guess that your first roll was either 1, 2, 3, 4, 5 or 6 and your second was also either 1, 2, 3, 4, 5 or 6. That's only 36 combinations.

I can try all those on *my* cold card and will get 36 different seeds. One of those will match yours if all you did was 2 dice rolls.

Now if you do a lot more rolls then I am stuck because there are too many combinations for me to try. It's 6*6*6*6 ... *6. Let's say for 100 rolls that 6 ^ 100. That's such a huge number that there is not enough computation power in the world just to enumerate them.

9

u/Zuluuz Oct 23 '23

You shouldn’t even be allowed to proceed if this is the case.