Victim of the Coldcard. Years of DCA Bitcoin gone overnight

Hi, Yesterday was one of the worst days of my life. I found out that just over 3 BTC was stolen from me through the Coldcard vulnerability.

I know some people think posts like this are fake. Mine isn’t. Real people are getting hurt by these thieves.

I did what I thought was the responsible thing. Back in 2022 everyone said the same stuff, get it off exchanges, get it into cold storage, use the best hardware wallet you can. Coldcard had a reputation as one of the best. It wasn’t the easiest thing to use but honestly that kind of made me trust it more. So I moved everything onto it.

For years I DCA’d $250 a week, plus bigger amounts when I could. Never touched it, never even checked on it. I thought I was doing the smart, boring, responsible thing.
Now it’s just gone. All of it.

Looking back I probably should’ve split it across wallets, or maybe just left it on Coinbase. I already know the multisig and don’t put it all in one place comments are coming and yeah, that’s probably good advice. But I did what I thought was right at the time based on what everyone in this space was telling me to do. That’s what makes this sting so bad.

I’m angry and honestly feel sick about it. Not sure what to do next. Posting this so people know it’s actually happening to real people. Happy to answer questions if anyone has them, and if you own a Coldcard, go check on it right now.