DEV Community: Jaime Fandiño

The Coldcard Theft: Why It's Time to Rethink Hardware Wallet Security

Jaime Fandiño — Mon, 03 Aug 2026 11:14:52 +0000

Before talking about Coldcard, hardware wallets, or private keys, we need to fix one of the biggest misconceptions in Bitcoin.

The Word "Wallet" Is a Lie

The word "wallet" is a lie

We call these things "wallets," and the word does enormous damage, because it makes people believe the device contains their money the way a leather wallet contains cash. It does not.
There is no Bitcoin in your Bitcoin wallet.

Your coins are not files. They are not tokens sitting on a chip. They are entries in a public ledger, unspent outputs recorded on thousands of copies of the blockchain, all over the world, secured by proof-of-work. Nobody "holds" them. They simply exist, on the chain, spendable by whoever can produce a valid signature.

If they can produce it easily by deriving your key fast…you are done….enjoy!

And why the recent Coldcard incident is about much more than one hardware wallet—it is a reminder that every layer of self-custody deserves careful scrutiny.
The recent Coldcard incident is a reminder that Bitcoin security does not end with buying a hardware wallet. Many people assume that once their private keys are generated inside a dedicated device, they are automatically safe forever. Reality is more complicated.

Security is never a product. It is a process.

The incident demonstrates an uncomfortable truth: the entire security of a wallet begins with one thing—entropy. If the randomness used to generate a seed phrase is predictable, every other security feature becomes irrelevant.

As artificial intelligence becomes increasingly capable of auditing software, analyzing hardware implementations, and discovering subtle weaknesses, we should expect every cryptographic protocol and every hardware wallet design to receive far more scrutiny than ever before.

1. Open Source Should Be the Default

My first recommendation is simple:

Use hardware wallets whose firmware and security-critical components are open source.

If the code cannot be audited by independent researchers, users are forced to trust the manufacturer blindly.

History has repeatedly shown that closed-source security rarely remains secure forever. Vulnerabilities are eventually discovered, but users often learn about them only after damage has already been done.

Open source does not guarantee security.

It guarantees verification.

Thousands of researchers can inspect the implementation, identify weaknesses, and improve it long before attackers exploit them.

Trust should never replace verification.

2. Never Trust a Single Source of Entropy

Generating a seed phrase is arguably the most important operation a hardware wallet will ever perform.

If the random number generator is compromised, biased, or intentionally manipulated, every wallet generated by that device may become vulnerable.

Below is a comparison of the entropy generation methods and security models used by different hardware wallet manufacturers.

Whenever possible:

Add your own entropy during wallet creation.
Passphrase
Roll physical dice.
Shuffle cards.
Use another independent entropy source.
Prefer wallets that mix external entropy with their own hardware-generated randomness.

The best randomness is randomness that does not rely on a single component.

Even if one entropy source fails, the final seed remains secure.

3. One Device Is Not Enough

People often spend thousands of dollars securing their Bitcoin while relying on a single hardware wallet.

That creates a single point of failure.

A practical rule is that once your Bitcoin holdings reach around $15,000 or more, it's worth introducing a second hardware wallet. At that point, the cost of an additional device is negligible compared to the value it helps protect.

Instead:

Keep multiple independent hardware wallets.
Store backups in different physical locations.
Use devices from different manufacturers.

Hardware diversity dramatically reduces systemic risk.

A vulnerability affecting one vendor should never compromise your entire savings.

4. Use Multisignature Wallets >30K $

Large amounts of Bitcoin should rarely be protected by a single key.

Multisig is one of the most important security improvements available today.

Instead of requiring one signature, funds can require two or three independent signatures before they move.

For example:

2-of-3
3-of-5

Each key should ideally live on a different hardware wallet from a different manufacturer.

An attacker must compromise multiple devices simultaneously instead of only one.

This changes the economics of an attack completely.

mental model changes everything about how you think about security.

The following diagram, shared by the Bitcoin security community, illustrates a recommended 3-signer setup designed to eliminate single points of failure. Rather than relying on a single hardware wallet or dedicated phone, each signer should be an independent device, with one kept securely offline as a backup. This architecture significantly increases the difficulty of compromising your funds, especially when combined with a multisignature wallet.

Recommended 3-Signer Setup (Community Recommendation)

Source: Vladimir S. (@officer_secret), based on community recommendations inspired by Axel Bitblaze's security model.
https://x.com/officer_secret/status/2077757794376204627

5. AI Will Change Hardware Wallet Security

Artificial intelligence is rapidly becoming one of the most powerful auditing tools ever created.

Future AI systems will review:

firmware
cryptographic implementations
random number generators
secure boot mechanisms
side-channel resistance
protocol assumptions

Bugs that previously survived years of human review may eventually be discovered in hours.

This makes open-source development even more valuable.

The more eyes reviewing a system—human or AI—the stronger it becomes.

6. Hardware Wallets Need Better Proofs

One idea worth exploring is the creation of Proof-of-Concept security frameworks for hardware wallets.

Instead of simply trusting manufacturers, the industry could establish standardized public demonstrations that verify critical properties such as:
Proof of Reserves to increase transparency and restore trust.
entropy quality
deterministic seed generation
firmware reproducibility
resistance against known attack classes
secure update mechanisms

Independent, repeatable verification should become the norm rather than the exception.

7. Can We Limit the Damage After a Key Is Compromised?

Today's cryptocurrencies generally assume that if a private key is stolen, everything can be transferred immediately.

That model deserves reconsideration.

Future wallet architectures—particularly on programmable blockchains like Ethereum—could include optional "financial firewalls" that limit catastrophic losses.

Examples might include:

Daily spending limits.
Maximum transaction values.
Mandatory time delays before large transfers.
Multi-stage approvals for high-value transactions.
Automatic alerts when unusual behavior is detected.
Emergency recovery periods before funds become irreversible.

These mechanisms would not eliminate key theft, but they could dramatically reduce the impact of a successful attack.

Traditional banking has layered defenses against fraud.

Self-custody systems should continue evolving in the same direction while preserving user sovereignty.

Final Thoughts

The Coldcard incident should not be viewed as an isolated failure of one product.

It should be viewed as a reminder that self-custody requires layered security.

No single device should ever be trusted completely.

The strongest setup is built on independent layers:

Open-source software that anyone can audit.
Multiple sources of entropy during seed generation.
Multisignature wallets.
Hardware diversity across different manufacturers.
Geographic separation of backups.
Continuous public review by both humans and AI.

Bitcoin gives us the freedom to become our own bank.

That freedom also makes us our own security team.

Hotaku — Decentralized Prediction Markets for Esports in Solana

Jaime Fandiño — Wed, 20 May 2026 09:48:35 +0000

Every weekend, somewhere between 200 and 800 million people watch other people play video games. They scream at monitors in Seoul, post copium in Berlin, and lose sleep in São Paulo. They hold strong, specific, often correct opinions about which roster is cracked, which IGL is washed, and which underdog is about to run the bracket.

And yet — until now — there was no real place to back any of it.

1. The problem: opinion is loud, signal is silent

Millions of esports fans have strong opinions about teams, players, and tournaments — but today those opinions mostly disappear into tweets, Twitch chats, Reddit threads, and Discord servers.

People constantly debate which roster is underrated, which team is collapsing, or who is about to win a tournament, but there’s no real system that turns those opinions into something measurable.

Traditional betting platforms barely focus on esports because the scene is fast-moving, fragmented, and difficult to understand. Meanwhile, most prediction markets are designed for politics, finance, or world events — not for esports matches where momentum can completely change in a single round or teamfight.

The result: one of the most active and analytical communities on the internet has never really had a proper platform to express conviction in its predictions.

2. The solution: a market built specifically for esports

Hotaku is built around a simple idea: use Solana’s low transaction costs and fast settlement speeds to make live esports prediction markets viable at scale.

The platform focuses entirely on competitive gaming — especially the niche tournaments, regional leagues, and fast-moving match formats that most traditional sportsbooks and general prediction platforms ignore.

Every esports match becomes a live market. Users buy outcome shares based on the side they believe will win, hold positions as the game evolves, or trade out in real time as probabilities shift during the match.

The price of each share continuously reflects the market’s current estimate of a team’s chance to win.

Because the system runs on Solana, users can participate with minimal fees and near-instant transactions — something that becomes especially important in esports, where momentum can change in seconds.

3. How it works — five steps

#	Step	What you do
01	Connect wallet	Phantom or any Solana-compatible wallet. No email, no password.
02	Find a match	Browse markets across CS2, LoL, VALORANT, Dota 2, AoE II, EA Sports FC.
03	Buy a position	Spend USDC on the side you believe in. LMSR price reflects probability.
04	Trade or hold	Sell anytime before resolution to lock in profit — or hold to maturity.
05	Claim winnings	Winning shares pay $1.00 each. Auto-withdraw to your wallet.

Key numbers:

💸 ~$0.01 average transaction cost
⚡ < 1 second confirmation
💰 0.5% trading fee
🎯 $1.00 per winning share

4. Inside the engine — pricing without a bookmaker

Most prediction markets you've used in your life were not real markets. They were spreads — a bookmaker quoted you a price, that price moved when the bookmaker decided it should, and you were always trading against the house.

Hotaku doesn't work that way. There's no house quoting anything. Prices come out of a mathematical object called a Logarithmic Market Scoring Rule, or LMSR.

LMSR is, in plain English, an automated market maker that is always willing to buy and sell shares of every outcome. It quotes a price as a function of how many shares of each side have already been bought. The more people pile into one side, the more expensive it gets to keep piling in.

The cost function

C(q) = b · ln( Σ exp(qᵢ / b) )

Where:

qᵢ — shares outstanding of outcome i
b — liquidity parameter (we tune this per market)

The natural log is the magic here. Because the cost grows as ln of the share count instead of linearly, the market can always provide a quote — even when nobody else is on the other side of your trade. The platform subsidizes a tiny, mathematically bounded amount of liquidity into every market so prices exist on day one. As real volume comes in, the subsidy effectively gets repaid by trader losses, and the market becomes more efficient.

This is the property that lets us launch markets nobody else can: a Tier-2 Age of Empires II showmatch with fifty hardcore viewers can have a real price, a real spread, and real trading from the moment it goes live.

Price equals probability. The bookmaker is a smart contract.

5. The long tail — the markets the big platforms won't touch

If you check Polymarket, Kalshi, or any traditional sportsbook for an Age of Empires II showmatch, you'll find nothing. For a mid-tier EA Sports FC qualifier? Nothing. For a Tier-3 VALORANT regional in LATAM or a Dota 2 South Asian league? Maybe a moneyline if you're lucky, and only if a big name is playing.

The big platforms optimize for volume per market, which means they only open markets when they're already confident hundreds of thousands of dollars will flow through them. Everything below that bar gets ignored.

That's the gap. There's an enormous, passionate, expert audience for these "ignored" scenes — people who can tell you a civ matchup in AoE II like Aztecs-on-Arabia better than most sportsbooks can tell you a Lakers spread.

Hotaku's LMSR engine is built precisely for this case. It can subsidize liquidity into a market with no organic counterparty, so prices exist from minute one. If fifty people care intensely, that's enough.

Game / Scene	Hotaku	Polymarket	Sportsbooks
Age of Empires II	✅ Live	❌ None	❌ None
EA Sports FC	✅ Live	❌ None	🟡 Thin
Tier-2 VALORANT / Dota	✅ Live	❌ Rare	❌ Rare
LCK / LEC majors	✅ Live	✅ Live	✅ Live
CS2 majors	✅ Live	✅ Live	✅ Live

This is the actual business model. Big platforms compete for the same Lakers-Celtics market. Hotaku owns the long tail — every Tier-2 bracket, every showmatch, every regional qualifier, every game with a competitive community that could support markets if anyone bothered to build them. Once you have the engine, opening a new market costs basically nothing.

6. Why Solana — built for fast, low-cost gaming markets

Solana has already become the default chain for internet-native trading communities, especially through the rise of memecoins and high-frequency on-chain activity. The ecosystem proved that millions of users are willing to trade rapidly, speculate socially, and interact with markets in real time — all with near-zero fees.

That matters for esports.

Esports prediction markets only work if trading is effectively frictionless. The interesting activity happens at micro stakes — a few dollars on a Tier-2 CS2 qualifier, a quick hedge between maps in a BO3, or a live position change after a draft or pistol round. On Ethereum L1 the gas alone would kill the trade. On most L2s the UX is still too fragmented or slow for real-time competitive gaming markets.

~$0.01 per trade. Roughly half a cent. You can open a $2 position on a play-in qualifier, re-hedge it multiple times between maps, and the total fees still remain negligible. That’s what makes micro-stakes esports trading actually viable.

Solana delivers the combination of properties this product needs:

Sub-cent fees. Opening, closing, and adjusting positions remains economically rational even at very small sizes.
Sub-second confirmation. Fast enough for live, in-match trading during volatile BO3 and BO5 series.
USDC as native collateral. No exposure to volatile reserve assets; one winning share always resolves to one dollar.
Public and auditable markets. Every trade, quote, and resolution exists transparently on-chain.

The trade-off is obvious: Hotaku depends on Solana’s uptime and infrastructure reliability. That risk is real, and we do not pretend otherwise. But for a product centered around fast-moving esports trading, the gap between Solana and the next-best alternative is still large enough that the decision was effectively made for us.

7. The public API — same surface for humans and bots

Everything you can do on hotaku.fun, you can do over HTTP. The API has two trading modes — Direct Trading (sign every transaction with Phantom) and Balance Trading (deposit USDC once, trade instantly) — plus a public market-data layer that needs no authentication at all.

Read-only endpoints — markets, teams, orderbook, profiles, comments — require no key. Build dashboards, leaderboards, Twitch overlays, or whole alternate frontends. We don't care; that's the point.

8. Roadmap — the next eighteen months

Hotaku is live today on Solana mainnet, with a public API and active markets across multiple esports titles. The next eighteen months are focused on deepening liquidity, expanding game coverage, improving trading infrastructure, and building the ecosystem around the platform.

When	Status	What
Jan 2026	✅ Shipped	Devnet Alpha — CS2 only, invite-only testers
Feb 2026	✅ Shipped	Closed Beta + Community — four titles, seasonal leaderboards
Mar 2026	✅ Shipped	Mainnet launch + Public API — USDC collateral, developer documentation
May–Jun 2026	🔄 In progress	Seed Round — fundraising process opened to accelerate liquidity, infrastructure, and partnerships (Crunchbase)
Q2 2026	🔄 In progress	HOTA TGE + Pro Tier — governance token, reduced-fee subscription tier
Q3 2026	📅 Planned	Publisher partnerships — branded prediction leagues with tier-one tournament organizers

9. A few honest caveats

Prediction markets are not a free lunch. Most traders, in most markets, lose money over time — that's how the market generates signal in the first place. Hotaku is no different.

Resolution depends on the source of truth. Markets resolve based on official tournament results. In the rare case of a postponed, cancelled, or disputed match, positions revert to the cost basis. We don't make discretionary calls — the resolution policy is published and on-chain.

This is not a sportsbook. Hotaku is a peer-to-peer market. You're not trading against the platform; you're trading against other users. Liquidity comes from the LMSR subsidy and from other traders' open positions. In thin markets, slippage is real and you should size accordingly.

Bring a take. Leave with a position.

Connect a wallet and place your first trade in under thirty seconds. Or read the docs, fork the API, and build something on top of it.

🌐 App: hotaku.fun
📚 API docs: api.hotaku.fun
🐦 Twitter: @hotakufun
💬 Email: info@hotaku.fun

Live on Solana · USDC collateral · 0.5% fee · LMSR pricing