Retirement Attack | Evidence Points to CEO and CTO in $114 Million Coin Theft
Edited By
Daniel Wu
A major controversy is brewing as fresh details emerge suggesting Coinkite's CEO Rodolfo Novak and CTO Peter Gray may have orchestrated a significant theft from their own customers. Recent audits indicate they may have exploited a flaw in their Coldcard wallets, resulting in millions in losses.
Bombshell Revelations Uncovered
In December 2020, a Bitcoin security researcher, Michael Flaxman, raised alarms about potential flaws in the Coldcard hardware wallets. Fast forward ten weeks, and the company's CTO shipped a critical update using a risky pseudorandom number generator. This move enabled the very attacks they claimed were impossible.
Dismissing Warnings
Despite warnings from the community, including one from as early as 2021, Coinkite failed to act. According to an anonymous source who flagged the firmware issues, "This was a radical deviation from previous practices."
Further complicating matters, a Signal group called "LNGU Clean Up" was created in May 2025, with members including the CEO and CTO. They remained inactive for fourteen months. The question looms: why no response?
Evidence Against Leadership
Notably:
A security audit confirmed the vulnerability in the pseudorandom generator.
Over 600 wallet addresses subjected to unauthorized transactions belonged to federal investigators.
Users who followed the recommended security practices reported no losses, highlighting the negligence in default settings.
"If they had audited the code properly, maybe $80 million wouldn’t have been stolen,” said one user.
Discrepancies in Accountability
Coinkite maintains it had no knowledge of the bug until the theft began. In a stark contrast, their response to alerts was dismissive, even joking about risk mitigation with dice. The implications here are troubling; if they knew about the bug and ignored it, their motives become questionable.
Growing Outrage
Users are expressing growing outrage regarding the handling of this breach. One user summed it up, stating, "Intentionally planting a bug that you plan to exploit is downright criminal."
Key Insights
◾ Coinkite offered no compensation to affected customers despite the severity of the breach.
◾ Fresh evidence suggests a calculated breach orchestrated by company insiders.
◾ "We’d already know about it if something was wrong"—this response has drawn heavy criticism from the community.
Culmination
Analysis of ongoing conversations and alerts reveals a clear narrative suggesting negligent and potentially criminal actions from Coinkite’s leadership. As the investigation develops, the community anxiously awaits justice for the families affected by this substantial betrayal.
Future Consequences of the Investigation
As the investigation unfolds, there’s a strong chance that authorities will delve deeper into Coinkite's operations. Experts estimate around 70% probability that the CEO and CTO will face legal actions, potentially leading to criminal charges. Given the outcry from the community and the growing evidence, regulators might push for stricter standards in cryptocurrency security, with around a 60% chance of new regulations aimed at protecting consumers. This could shift the industry landscape significantly, prompting similar companies to reassess their internal practices and protocols.
Echoes of the Past
A compelling parallel can be drawn to the infamous collapse of Enron in the early 2000s. At the heart of that scandal was a leadership that prioritized profits over ethics, leading to devastating fallout for investors and employees alike. Just as Enron's executives manipulated financial statements for personal gain, the Coinkite situation highlights a troubling trend in tech—where a disregard for security and transparency can result in widespread harm. Both episodes serve as stark reminders of the importance of accountability in leadership, revealing that when greed overrides responsibility, the consequences can be catastrophic.