Approximate BTC loss
Provide an estimate to support case grouping.
Independent claimant intake
Report your Coldcard incident confidentially.
If your bitcoin moved without authorization, submit the core facts so patterns can be reviewed across timelines, transactions, and device context.
Never share a seed phrase, private key, PIN, wallet password, or recovery words.
Transaction hash
Public blockchain references help compare incidents.
Device and timeline
Model details and date noticed can reveal clusters.
Contact details
Only used for follow-up on relevant updates.
No wallet access requested. No upfront fee. No guarantee of recovery.
Incident context
What happened?
Coinkite's published security advisories state that affected firmware versions used an unintended randomness path during seed generation. In plain terms, some seeds may have had materially lower entropy than intended.
Users have reported unauthorized on-chain movements from impacted wallets. Based on currently published technical analysis, this appears consistent with seed-predictability risk in affected configurations, rather than ordinary user mistakes alone.
Our intake is designed to help Coldcard victims document timelines, transaction evidence, and device context in a structured format so patterns can be reviewed and participants can receive coordinated updates.
A clearer record
From individual reports to a coordinated picture.
A single report can be dismissed. Structured, comparable reports can help identify shared patterns and possible next steps.
Report
Share what happened, when it happened, and the transaction data you can verify publicly.
Review
We compare submissions for common timelines, transfer patterns, and device circumstances.
Connect
If appropriate, participants receive coordinated updates on practical options and next actions.
Before you begin
Bring public evidence. Keep private secrets private.
A transaction hash is public blockchain data. Secret wallet credentials are not. Please only send what is needed to understand the incident.
OK to include
- Transaction hash or transaction ID
- Approximate amount lost
- Date you first noticed the loss
- COLDCARD model and setup context
Never include
- Seed or recovery phrase
- Private keys or wallet export files
- Device PIN or wallet password
- Any request to move your funds
Victim group intake
Share your incident.
Complete the form to add your report to the claimant register. We will review the information and contact you if additional details are needed.
Private intake: Your submission is sent directly to our team and is not displayed publicly.
Prefer email? austin@vl-cm.com
Questions
Before you submit.
Who should complete this intake?
Anyone who believes they suffered an unauthorized transfer involving a COLDCARD device and wants their report considered in a broader pattern review.
Is this affiliated with Coinkite or COLDCARD?
No. This is an independent intake operated by VL Capital Management.
Does submitting create a legal relationship?
No. Submitting this form does not create legal representation, investment advice, or a guaranteed claim outcome.
What happens to my information?
Submissions are used for incident assessment, group pattern analysis, and direct follow-up where relevant.
One record at a time
Your report may help complete the picture.
If you'd rather write directly, contact us and include only non-sensitive details.
Independent intake. Not affiliated with or endorsed by Coinkite or COLDCARD.