Cold storage was protected by a very large number.
The number held. The dice did not.
A commemorative token, in memory of the firmware.
- Price
- $0.00001226
- Market cap
- $12,260
- 24h
- ▲ +20,125%
- 24h volume
- $11,470
- Pair age
- —
- Keyspace
- 2256 ▲ ±0%
115,792,089,237,316,195,423,570,985,008,687,907,853,269,984,665,640,564,039,457,584,007,913,129,639,936 — two to the power of two hundred and fifty six — the number of possible private keys. The entire security model.
01Exhibit
02The Number
A number so large it was the entire security model.
There are more possible private keys than atoms in the observable universe. If every human who has ever lived checked a trillion keys per second since the beginning of time, the search would not have meaningfully begun. This is not marketing. It is arithmetic, and it has never once failed.
It does, however, come with one assumption printed in very small type: you have to actually pick from all of it.
Between certain firmware versions, certain devices did not. The seed generator quietly reached for a deterministic function instead of the hardware's dice, and the haystack — advertised at 115 quattuorvigintillion straws — shrank, for some wallets, to a space a patient stranger could walk end to end. The needles stayed exactly where they were. As reported: 1,082 BTC, out of 1,196 addresses, in 41 minutes, on a Thursday.
The number never failed. Nothing about 2256 failed. Somewhere below the number, a shortcut was taken, and the shortcut was the whole ballgame.
$115792 is the first six digits of the number that worked — a ticker in memory of the firmware that didn't.
2256. The size of the private-key space. Elliptic-curve keys on secp256k1 live just under it, at n = 0xFFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFE BAAEDCE6 AF48A03B BFD25E8C D0364141. Your odds of guessing a specific key are 1 in this number. Your odds if the key came from a 2021 pseudorandom shortcut are, per the reporting, considerably more sociable.
The manufacturer's own guidance notes that seeds generated with 50 fair dice rolls are unaffected. Fifty casino dice, thrown by hand, out-performed the firmware. The dice were always the more rigorous engineer. This token honours the dice.
On July 30, 2026, per multiple outlets, an attacker who had reproduced weak seeds offline swept 1,196 funded addresses — roughly 1,082.65 BTC, about $70M at the time — in 41 minutes. Emergency firmware followed the next day, with a caveat worth framing: installing it does not repair an existing seed. See the Evidence section for the journalism; we only sell the commemorative ticker.
No. Absolutely not. In no jurisdiction, timeline, or keyspace. This is an unaffiliated parody / commemorative meme token. All trademarks belong to their owners; all firmware belongs to its consequences. The frog speaks only for the frog.
03Incident metrics · as reported · ongoing
Quarterly highlights, involuntary edition.
attack ongoing
≈ $86M at BTC $63,000
as of Aug 2, 2026 · 05:30 EDT
figures still climbing
BTC relocated1,367.05▲ climbingacross three waves · one operator
Addresses swept4,585derived offline, matched on-chain
Held, unspent100%the attacker is consolidating, not cashing out
Advertised keyspace2256effective, for some wallets: nearer 2⁴⁰ – 2⁷²
Counts load from incident.json (re-verified against reporting on a schedule); the dollar figure updates live against the Bitcoin price. This is an ongoing event — totals have only gone up. Vendor remediation is documented, but patched firmware cannot repair an already-weak seed. If any of this touches you personally: close this meme site and go move your coins.
04Evidence · we did not invent the news
CoinDeskMajor bitcoin wallet flaw drains 594 BTC in 25-minute sweep
The Hacker NewsColdcard hardware wallet flaw linked to $70 million Bitcoin theft in 41 minutes
Forbes'Attacks are ongoing' — urgent warning issued after sudden spread of massive Bitcoin attack
CoinDeskColdcard exploit reignites Bitcoin self-custody debate after $38 million theft
Bitcoin.com NewsThe Coldcard exploit explained: who lost Bitcoin and who's at risk
TechTimesBitcoin faces worst month after Coldcard exploit drains $38M from 500 wallets
05Market · live
The chart. Fully generated from hardware randomness, probably.
Price · USD—— SOL
Market cap / FDV—FDV —
Liquidity—24h vol —
24h flow—buys — · sells —
Δ 1h / 6h / 24h—updating…
1 SOL buys—$115792 at the current pool rate
Pool reserves—— SOL
Turnover · 24h—volume ÷ liquidity. the pool works overtime.
Live supply—on-chain, refreshed each minute
Burnt1,000,000,000of 2,000,000,000 minted — sent somewhere with provably no firmware
Activity—m5 — · h1 — · h6 —
Pair age—counting since the pumpswap pool opened
Trend · reconstructedfrom Δ buckets: −24h · −6h · −1h · −5m · now
Share of 2²⁵⁶≈ 1.06 × 10⁻⁷¹%of the keyspace, if market cap were keys. a decimal point and seventy zeros. room to grow.
Chart won't load? Some content blockers reject embeds on principle. Switch source above, or open DexScreener ↗ · Jupiter ↗ directly.
06Swap console · simulated locally, settles elsewhere
The console. No wallet attached. No seed requested. Ever.
A swap interface that cannot touch your funds — rendered in loving memory of interfaces that could.
Quotes are computed in your browser from the live pool reserves: constant-product arithmetic, no oracle, no middleman, no March-2021 firmware anywhere in the pipeline. Execution happens on Jupiter or pump.fun under your own wallet's supervision. We never ask for a connection — we wouldn't know what to do with one.
> entropy HARDWARE ✓
> route SOL → WSOL → $115792
> slippage 50 fair dice rolls
You give
SOL
≈ $—
You receive · est.
—
$115792 ≈ $—
> this console is a visualization. amounts are estimates from live reserves. the button opens Jupiter; your keys remain yours, which is the entire point of this website.
07The pool · x·y = k, observed live
One hyperbola holds the whole thing together.
drag the dot · simulate a trade
loading reserves…
— $115792— in pool
— per SOL
— SOL— in pool
Liquidity · total—
Price—
Constant · k—
Pooled supply—
1 SOL buys—
pool snapshot · updated — · next refresh in 15:00
The pool reserves, TOKEN:SOL bar and metrics refresh on a fixed 15-minute snapshot (the countdown above shows the next one). Drag the marker (or use the steppers — they're the keyboard path) to simulate a buy or sell against the real constant-product curve and watch the price impact. Simulations stay in your browser. Obviously.
08Flow monitor
Live transactions. Watched openly, which is more than some firmware can say.
| Age | Side | $115792 | SOL | USD | Signature | Links |
|---|---|---|---|---|---|---|
Listening for movements. The keyspace remains extremely large. | ||||||
Signatures via getSignaturesForAddress, amounts parsed from each transaction's balance deltas (pool vaults are owned by CW959iWe…UeBmvV, so sides classify themselves), refreshed every ~12 seconds while this tab is visible. Click a signature for the full forensic experience on Solscan.
09Acquisition procedure
Three steps. Zero firmware.
Obtain SOL
Any exchange, any wallet. Generated after March 2021, ideally, but we are not your auditors.
Verify the address
Paste the contract, check the first and last characters like your grandfather taught you. Fwxt…pump. Don't trust — that other slogan.
Swap & hold
On pump.fun or any Solana DEX. Custody it however you like. We hear hardware wallets are excellent.
10Entropy ceremony · roll your own
Beat the firmware by hand.
The vendor said seeds made from fifty fair dice rolls were never at risk. So here are the dice. Every roll pulls fresh randomness from your device's cryptographic generator — the hardware source the firmware was supposed to use — and stacks it into a seed. It is a toy. That is the whole point.
0 rolls · 0 bits · the firmware managed ~40–72
every four rolls → one word
Dice Rolls
Generate Recovery Phrase
Derived by hashing your exact roll sequence — the same rolls always yield the same words, because that is how entropy is supposed to work.
This is a novelty. It runs inside a webpage on a memecoin site. Never secure real funds with a phrase generated here — or on any website. The lesson worth keeping is the method: real dice and a real random source beat broken firmware every time. For actual cold storage, roll physical dice into a device you trust, offline.