<p>The security of your coins relies on having being able to produce a random number within a large range of possible numbers. A large range is required so that it is infeasible for someone to search the entire space of all private keys, and so that it is extremely unlikely (basically impossible) for someone to produce the same key that you did. Randomness is required to ensure that the random number you picked cannot be guessed.</p>
<p>When you use only one or very few dice rolls, while you may have pretty good randomness, the range of numbers you can produce is not large enough. Thus if someone wanted to take your coins, they can just pre-generate all of the keys in that range (by iterating all possible numbers) and watch for any coins to be sent to them. That is presumably what happened to this person on Reddit.</p>

CC BY-SA 4.0
2023-10-27T23:07:48.547Z
This has happened to me as well and I did all the dice rolls. Good news is if I put my xpub key online , it does show the change address part of the same public key
caliGeek
CC BY-SA 4.0
2023-10-30T14:58:07.550Z
If you want to provide more context to your question, please edit your question post instead of commenting.
Murch
CC BY-SA 4.0
2023-11-09T15:11:11.353Z
@Murch it appears programs like electrum create a new receiving address and put your coins there for privacy
caliGeek
CC BY-SA 4.0
2023-11-09T16:43:38.493Z
This throws the ledger off to a normal user trying to monitor his or her balances
caliGeek
CC BY-SA 4.0
2023-10-27T15:04:23.430Z
2023-10-30T14:57:37.063Z
2023-10-30T14:57:37.063Z
Ava Chow
<p>I experienced what the user on Reddit here experienced. Any idea why this happens ?</p>
<p><a href="https://www.reddit.com/r/coldcard/comments/17epqk8/040_bitcoin_taken_instantly_from_my_coldcard/" rel="nofollow noreferrer">https://www.reddit.com/r/coldcard/comments/17epqk8/040_bitcoin_taken_instantly_from_my_coldcard/</a></p>
<p>Doesn’t look like the seed was shared as it’s a new wallet so what is this mechanism in coldcard. How would the user send his bitcoin if they experience this?</p>

CC BY-SA 4.0
2023-10-30T14:56:45.373Z
Could you please summarize what happened to you? We prefer when questions are self-contained on this site, so it remains understandable in case the linked resource is deleted. You can of course link to the other user’s experience for additional context.—Could you please clarify whether your funds got stolen, or all of your funds got moved to another address that you also control?
Murch
CC BY-SA 4.0
2023-11-09T05:04:03.810Z
So after receiving the coins I’ve noticed electrum creates a new address and puts my coins there for privacy. It’s unclear how to use the UI to send coins now
caliGeek
CC BY-SA 4.0
2023-11-09T13:15:39.617Z
If you received coins and they immediately got moved to some other address, I’m afraid that sounds like malware
Murch
<bitcoin-core><client><electrum><sparrow-wallet><coldcard>
Coldcard sparrow
caliGeek
# Coldcard sparrow

(Asked by: username_0 on 2023-10-27)

I experienced what the user on Reddit here experienced. Any idea why this happens ?

<https://www.reddit.com/r/coldcard/comments/17epqk8/040_bitcoin_taken_instantly_from_my_coldcard/>

Doesn’t look like the seed was shared as it’s a new wallet so what is this mechanism in coldcard. How would the user send his bitcoin if they experience this?

**Tags:** bitcoin-core, client, electrum, sparrow-wallet, coldcard

> **Comments:**
> **username_1**: Could you please summarize what happened to you? We prefer when questions are self-contained on this site, so it remains understandable in case the linked resource is deleted. You can of course link to the other user’s experience for additional context.—Could you please clarify whether your funds got stolen, or all of your funds got moved to another address that you also control?  
> **username_0**: So after receiving the coins I’ve noticed electrum creates a new address and puts my coins there for privacy. It’s unclear how to use the UI to send coins now  
> **username_1**: If you received coins and they immediately got moved to some other address, I’m afraid that sounds like malware  

---

## 1 answers

### Answer by username_2 on 2023-10-27. Score: 1

The security of your coins relies on having being able to produce a random number within a large range of possible numbers. A large range is required so that it is infeasible for someone to search the entire space of all private keys, and so that it is extremely unlikely (basically impossible) for someone to produce the same key that you did. Randomness is required to ensure that the random number you picked cannot be guessed.

When you use only one or very few dice rolls, while you may have pretty good randomness, the range of numbers you can produce is not large enough. Thus if someone wanted to take your coins, they can just pre-generate all of the keys in that range (by iterating all possible numbers) and watch for any coins to be sent to them. That is presumably what happened to this person on Reddit.

> **Comments:**
> **username_0**: This has happened to me as well and I did all the dice rolls. Good news is if I put my xpub key online , it does show the change address part of the same public key  
> **username_1**: If you want to provide more context to your question, please edit your question post instead of commenting.  
> **username_0**: @username_1 it appears programs like electrum create a new receiving address and put your coins there for privacy  
> **username_0**: This throws the ledger off to a normal user trying to monitor his or her balances  

---

