Aug 25, 2026 · 51 min
Listen from 25:09
Listen at 25:09
A $1.6 million hack tests the case for self-custody
Jonathan Goodman: Losing $1.6 Million in ColdCard Hack, Why He Isn't Angry and the Bigger Lesson Learned
Jonathan Goodman’s loss exposes how a single-device failure can turn Bitcoin self-custody into catastrophic financial risk.
- 1A Coldcard-related vulnerability wiped out more than 18 Bitcoin, including savings Jonathan Goodman intended for his children.
- 2The conversation separates Bitcoin’s underlying system from hardware-company failures, while questioning single-signature custody and concentrated risk.
- 3Jonathan responds by documenting the theft, auditing other systems, and rebuilding without minimizing the loss or blaming victims.
Don't miss
Goodman explains why losing money intended for his children did not destroy his belief in Bitcoin, but did force him to rethink self-custody.
The brief
Jonathan Goodman recounts losing more than 18 Bitcoin—about $1.6 million, including money intended for his children—after a vulnerability compromised his Coldcard-based storage.
The loss becomes a case study in single-signature custody, device-level risk, and common-cause failure, as Goodman weighs Coldcard’s response and the slim prospects of compensation.
Rather than abandoning Bitcoin, Goodman distinguishes the hardware failure from Bitcoin itself, while reconsidering how much security, diversification, and convenience he is willing to trade.
He makes the theft public, files reports, and audits other systems, turning a private catastrophe into a record of what victims and future custodians should examine.
The episode’s sharpest lesson is not to optimize for maximum self-custody at the expense of survivability: avoiding one catastrophic failure may matter more than perfect control.
What was said on this episode
26 statements · 15 positive · 9 negative · 2 neutral
Jonathan’s safeguards shared a common vulnerability rather than providing independent protection.
“Every piece of protection that I had was protecting against the same vulnerability.”
Listen at 4:18
Cold Card’s response appropriately prioritized protecting users not yet affected.
“I think they're trying to protect people that still haven't gotten hit, which I think is the correct reaction.”
Listen at 6:02
Cold Card compensating every victim is neither reasonable nor realistically possible.
“Do I think that that is reasonable or within any realm of possibility? No.”
Listen at 6:18
Preparing for unexpected catastrophic failures is necessary for protection in modern technological life.
“I think that the only way to exist is actually to uh protect yourself by preparing For at one point, the unexpected to come and kick you in the teeth.”
Listen at 9:25
Jonathan is auditing other systems for similar common-cause failures.
“So I'm auditing other places in my life.”
Listen at 16:00
The Cold Card incident was not a failure of Bitcoin itself.
“This wasn't, to me, this wasn't a failure of Bitcoin.”
Listen at 17:16
An AI system likely helped discover the Cold Card vulnerability.
“It seems pretty clear, though. I mean, you've talked about this on your podcast, that there was some AI system very likely involved”
Listen at 17:42
The Bitcoin ecosystem has been strengthened by the vulnerability being exposed.
“I think you're right. It's been hardened.”
Listen at 19:25
Bitcoin offers an almost unmatched expected-value opportunity.
“The expected value equation of Bitcoin is virtually unmatched.”
Listen at 19:56
A class-action lawsuit over the Cold Card hack is unlikely.
“There's not going to be a class action lawsuit. I don't think so.”
Listen at 20:26
Law firms are pursuing a $10–15 million small-group suit against CoinKite.
“they're trying to bring a small group suit against CoinKite for somewhere between 10 to 15 million.”
Listen at 22:35
The proposed suit is being limited to avoid bankrupting CoinKite.
“specifically try not to bring too big of a suit towards CoinKite that will bankrupt CoinKite.”
Listen at 22:55
Later attackers became more sophisticated after recognizing the vulnerability and available funds.
“as time has gone on other people have realized that there is a back door and there are funds at play and so they're they're becoming more sophisticated with how they're doing this”
Listen at 31:36
Attackers may have prioritized larger wallets before news spread widely.
“I think, Natalie, that makes a lot of sense. They were like, let's drain these bigger wallets first because once other people find out.”
Listen at 32:42
The Cold Card hackers have a strong chance of being caught.
“I think there's a very good chance that whoever did this is going to get caught.”
Listen at 33:59
Jonathan considers recovering his stolen Bitcoin unlikely.
“But I don't think there's a good chance that I'm going to get the money back.”
Listen at 34:04
Blockchain transparency can help trace stolen Bitcoin.
“That's the benefit of the blockchain.”
Listen at 35:13
Society increasingly relies on unfamiliar code to safeguard irreplaceable assets.
“The book is about the broader implications of Us all being forced to trust code that we don't understand with things that we can't afford to lose.”
Listen at 40:34
Victims may eventually view the hack as a transformative life event.
“I really deeply, truly hope you will look back on this event as a catalytic, transformative point in your life.”
Listen at 41:54
The hack reflects a hardware-company failure rather than a Bitcoin failure.
“This was not a failure of Bitcoin. This is a failure of a hardware company.”
Listen at 46:39
Bitcoin remains an important store of value and accountable public ledger.
“Bitcoin still serves a very important function as a store of value, as a public ledger that is accountable.”
Listen at 46:49
Bitcoin remains an unusually large asymmetric investment opportunity despite its higher price.
“I think it also still, even with the price going up, represents a virtually unprecedented asymmetric bet.”
Listen at 47:02
Accepting lower optimization is worthwhile when it reduces catastrophic risk.
“It is worth sacrificing a little bit of optimization in order to avoid catastrophic risk.”
Listen at 48:15
Jonathan recommends not investing all assets in Bitcoin despite strong conviction.
“Didn't invest everything I had into it, even though I believed in it a lot.”
Listen at 48:42
Avoiding total financial ruin is more important than becoming extremely wealthy.
“I can't afford to get taken out of the game.”
Listen at 48:55
Jonathan hopes to have overcome and contextualized the loss within five years.
“I hope I'm going to be able to look back at this and we're going to sit down here five years from now and you're going to say, hey, five-year recap, what happened? I'll be like, what happened was awful, but it was a test.”
Listen at 49:39
Statements are attributed to the speaker as said on the episode and reflect their view at the time, not PodLume's. They are not advice.
Books & mentions
Some links are affiliate links — PodLume may earn a commission if you buy.
