He Did Everything Right and Still Lost His Bitcoin | Jonathan Goodman on the Coldcard Hack — Key Takeaways
YouTube
He Did Everything Right and Still Lost His Bitcoin | Jonathan Goodman on the Coldcard Hack
Natalie Brunell51mAug 25, 2026
Watch the originalJonathan Goodman lost 18+ BTC (~$1.6M) to the ColdCard entropy vulnerability because all three of his redundant devices shared the same flaw — a textbook common cause failure that no amount of physical security could prevent.
Key takeaways
Common cause failure: all redundancies protecting against the same single vulnerability offer zero extra security
Common cause failure: all redundancies protecting against the same single vulnerability offer zero extra security
- Three separate ColdCard devices + metal-stamped seed backups all failed simultaneously because the flaw was in seed generation, not storage
- Analogous to storing all passwords in one password manager or running all home security through one Wi-Fi network
ColdCard's weak entropy let hackers mathematically guess seed phrases without physical access
ColdCard's weak entropy let hackers mathematically guess seed phrases without physical access
- Victim had 3 air-gapped ColdCard devices in a bank safety deposit box — never connected to internet — yet lost 18+ BTC
- All five of his redundancies (3 devices + metal-stamped backups) shared the same root vulnerability: faulty RNG entropy
Toronto police detective stated explicitly: their goal is catching perpetrators, not recovering stolen funds
Toronto police detective stated explicitly: their goal is catching perpetrators, not recovering stolen funds
- Detective's direct quote paraphrased: 'Our job is to catch the bad guys — not to chase after your money'
- Cyber crime unit was engaged but victims should not expect asset recovery as a police priority
This Dig holds 4 more insights, 4 flashcards, and 3 quotes — free with your trial.
Unlock this Dig freeStart free with 100 credits · No card, no expiry
In this video
- 1mTrailer & Intro
- 1mThe moment he found out he lost his Bitcoin
- 3mWhy he trusted one device
- 5mThree backups, one flaw
- 6mHow the company Coinkite responded
- 8mAn hour on hold with police
- 14mWhat detectives told him
- 15mTelling his family
- 18mThe critical error that caused $100 million losses
- 20mClass action lawsuits coming?
- 30mThe risk nobody thinks to plan for
- 32mWatching the hacker move the coins
- 36mThe strangers who showed up to help
- 39mWriting a book about the loss and lessons
- 41mTo everyone else who lost coins
- 43mWhat he'd say to the founder
- 44mWill he hold his own keys again?
- 46mWhy he never bet it all
“Every every piece of protection that I had was protecting against the same vulnerability.”
— Jonathan Goodman
This page is a partial, transformative summary produced by Homestake. All rights to the original content remain with its creator — please support them at the source link above.
