Retirement Attack | Evidence Emerges Against CEO and CTO for Coin Theft
Edited By
Marko Petrovic
In a shocking twist, growing evidence suggests that the CEO and CTO of Coinkite might be implicated in a significant theft of Bitcoin from their users. As the investigation unfolds, details point to a likely coordinated effort to exploit a security vulnerability in their hardware wallets.
Unraveling the Security Breach
The narrative surrounding the alleged theft began with a warning from Bitcoin security expert Michael Flaxman, who raised concerns about potential retirement attacks in December 2020. This was followed by dismissive remarks from Coinkite CEO Rodolfo Novak. Ten weeks later, CTO Peter Gray shipped firmware changes that wound users' seed generation through a questionable pseudorandom number generator, which experts outline could have allowed for future exploitation.
Timeline of Disturbing Decisions
Key developments over the years illustrate a continuous pattern of negligence:
2020: Flaxman warns about potential retirement attacks in a tweet.
March 2021: Gray pushes firmware updates that introduce the faulty RNG that had been in place for five years.
October 2021: Coinkite publicly claims its devices are immune from retirement attacks while dismissing points raised by concerned users on forums.
A Deepening Scandal
Recent analysis highlights that numerous alerts about the faulty RNG were ignored. James O’Beirne, a security researcher, warned the company about crucial vulnerabilities in 2025 after auditing the same RNG library linked back to Gray. Coinkite’s response was lackluster, simply stating, "We’d already know about it by now."
Notably, a Signal group—dubbed "LNGU Clean Up"—was created to address these known issues, but the company failed to implement any fixes for roughly 14 months. One concerned commenter summarized the prevailing sentiment, stating, "This is an exit scam for developers."
"If they had kept him on and asked him to audit the codebases, there’s a good chance he’d have spotted the practices at issue." - Peter Todd, former Chief Naysayer at Coinkite.
Key Takeaways
⚠️ Email correspondence indicates Coinkite has not deleted customer data as previously claimed.
🔍 Over 600 of the drained wallets belonged to federal law enforcement, raising concerns about insider knowledge.
💔 "The fix broke too," hinted a developer after Coinkite’s emergency update introduced further issues.
Community Reaction
The sentiment among people remains largely negative, with many feeling betrayed by what appears to be corporate cover-up. One remark echoed across forums: "They knew they had access to thousands of keys. This is a cold wallet owner's worst nightmare."
Interestingly, some believe that an insider might have exploited the failure for personal gain, pointing out the alarming timeline and responses.
As this developing story unfolds, it remains to be seen how Coinkite will respond to mounting pressure from both users and investigators. With trust at stake, many are asking: How could Coinkite have let this happen without foreseeing the devastating consequences? The scrutiny on leadership intensifies as potential prosecution looms.
What Lies Ahead for Coinkite?
Expect Coinkite to face increased scrutiny from both users and investigators over the next few months. With a significant number of wallets linked to federal law enforcement, there's strong potential for legal ramifications. Experts estimate there's a 70% chance that the CEO and CTO will either step down or be pushed out as evidence mounts against them. The crypto community demands accountability, meaning pressure from users might lead Coinkite to fix security vulnerabilities in a bid to regain trust. Meanwhile, investors may turn to alternative hardware wallet solutions, which could reduce Coinkite’s market share and further impact the company's performance.
A Lesson from History’s Playbook
This situation draws a surprising parallel to the infamous Theranos scandal, where promises of revolutionary technology crumbled due to internal deceit and oversight failures. Just as Theranos executives faced mounting backlash for misleading investors and the public, Coinkite's leadership now finds themselves under a similar cloud of betrayal and scrutiny. The sudden collapse of what was once viewed as a trusted brand serves as a cautionary tale in the tech landscape, illustrating how quickly reputations can erode and empires fall due to greed and mismanagement, leaving both innovators and consumers to pick up the pieces.