Did Bitcoin Change Forever After the COLDCARD Hack? | Zach Herbert | BFM273

<p>Zach Herbert is Co-founder and CEO of Foundation, building Passport Prime, an open-source device that moves your digital authority onto dedicated, secure hardware:one device built to be held, verified, and trusted.</p><p>› <a href="https://x.com/zherbert">https://x.com/zherbert</a></p><p><br></p><p><strong>PARTNERS</strong></p><p>🔐 The Bitcoin Way is your personal Bitcoin security team. Schedule a free, 30-minute consult: <a href="http://www.thebitcoinway.com/bram?utm_medium=podcast&utm_source=partner-bram-kanstein">http://www.thebitcoinway.com/bram?utm_medium=podcast&amp;utm_source=partner-bram-kanstein</a></p><p>🤝 Firefish is the open market for Bitcoin-backed loans. Find offers and get 30% off your first loan’s fees with code BRAM: <a href="http://firefish.io/?ref=BRAM">http://firefish.io/?ref=BRAM</a></p><p><br></p><p><strong>PRODUCTS I ENDORSE</strong></p><p>› Get 10% off a Bitaxe open-source Bitcoin home miner using code <strong>BRAM</strong> at <a href="https://shop.powermining.io/?ref=BRAM">https://shop.powermining.io/?ref=BRAM</a></p><p>› Heat your home and Earn Bitcoin with Heatbit - Get 5% off with code <strong>BRAM</strong> <a href="https://heatbit.com/?ref=BRAM">https://heatbit.com/?ref=BRAM</a></p><p>› Stamp Seed: The safest way to backup your hardware wallet - Get 15% off with code <strong>BRAM</strong> at <a href="https://stampseed.com">https://stampseed.com</a></p><p><br></p><p>🔔 <strong>SUBSCRIBE TO GET NOTIFIED</strong></p><p>› <a href="https://youtube.com/@bramk%E2%81%A0%E2%81%A0">https://youtube.com/@bramk⁠⁠</a></p><p>› <a href="https://x.com/bramk">https://x.com/bramk</a></p><p><br></p><p>🕑 <strong>TIMESTAMPS</strong></p><p>00:00 - Coldcard exploit, what likely happened</p><p>02:29 - Negligence vs conspiracy theories</p><p>04:54 - Why basic entropy checks failed</p><p>06:30 - Source available vs open source</p><p>08:13 - Closed source scenario, why panic</p><p>09:25 - Why FOSS still wins long term</p><p>12:58 - Ledger, audits, and verification limits</p><p>16:30 - Why this bug was the worst case</p><p>19:23 - AI changes wallet threat models</p><p>21:56 - Best practice, rerun audits per model</p><p>24:56 - Self-custody backlash, convenience vs control</p><p>32:34 - Designing happy path vs advanced mode</p><p>36:54 - Do you need a phone?</p><p>37:45 - QR air gap limits and Quantum Link</p><p>57:04 - Hardware wallet cooperation, not infighting</p><p>1:04:24 - Biggest takeaways for average users</p><p><br></p><p>ℹ️ <strong>EPISODE SUMMARY</strong></p><p>Bram Kanstein and Zach Herbert discuss the Coldcard entropy failure and why it smells like negligence, not a nation state plot. They confront how “don’t trust, verify” often stops at a slogan, even when seed generation is the whole game. They map the trade-offs between closed source, source available, and true FOSS, especially now that AI can audit firmware fast. Zach reveals why Foundation moved past pure QR air gaps, and how Quantum Link uses QR to bootstrap an encrypted Bluetooth tunnel. They zoom out to the real damage: self-custody adoption, UX vs hardcore OPSEC, and an industry that needs a rapid response loop.</p>