What happened
In 2011, a German-born programmer named Stefan Thomas was paid 7,002 bitcoin for producing an animated educational video titled What Is Bitcoin?. At the time, the payment was worth a few thousand dollars. Thomas didn't particularly care about the size of the wallet — he was an early enthusiast, and he stored the seed on an IronKey, a hardened encrypted USB drive marketed to government agencies and security-conscious enterprises.
The IronKey has a feature that, in a normal corporate context, is a virtue: if you fail to enter the password ten times in a row, the device cryptographically erases its own decryption keys. The data does not just become inaccessible — it becomes mathematically destroyed. There is no recovery vendor, no forensic technique, no fallback. It is a deliberate kill switch designed for laptops carried by case officers and military attachés.
Thomas wrote the password down on a piece of paper. He then, by his own account in a January 2021 New York Times profile, lost the paper.
"I would just lay in bed and think about it. Then I would go to the computer with some new strategy, and it wouldn't work, and I would be desperate again."
By the time the Times story ran, Thomas had used eight of his ten password attempts. Two remained. The 7,002 bitcoin behind the drive were worth more than $220 million that week. He had stopped trying — he could not afford the psychological cost of a ninth wrong guess.
The drive, as of public reporting, has not been opened. In late 2023 a company called Unciphered claimed to have developed a hardware exploit capable of bypassing the attempt counter on certain older IronKey models. They publicly offered to crack the drive. Thomas declined the offer. Subsequent reporting suggested he had entered into an exclusive recovery arrangement with another party. As of this writing the wallet remains dormant on chain.
Where it went wrong
The IronKey is doing exactly what it was designed to do. The failure isn't in the hardware. The failure is in the architecture Thomas chose for his backup strategy. Three specific things went wrong, and any one of them being different would have saved the wallet:
- Single-factor recovery. The only path back to the wallet was one password. There was no second copy of the seed. There was no second key holder. There was no escrowed copy. Lose the one credential and you lose everything.
- Recovery medium that can be lost. A piece of paper in a desk drawer is not a recovery plan. It is a fragile, copyable, single-instance backup that any house move, fire, flood, or distracted spring cleaning can destroy.
- No social recovery. No spouse, no lawyer, no friend, no service had any piece of the puzzle. The recovery surface was a population of exactly one person — and that person was now relying on his own memory of a password he chose a decade earlier.
Compounding all three: the IronKey itself is a hostile environment for human-scale recovery. Ten guesses is plenty for a careful operator in a managed corporate setting where passwords are policy-enforced and password managers are deployed. It is catastrophic for a personal long-term seed-storage problem where the user might not need to authenticate again for years.
Why "remember it perfectly" is a broken scheme
Stefan Thomas is not careless. He went on to found Ripple Labs, served as its CTO for years, and is now CEO of Coil. He is, in every conventional sense, a technically capable person. The lesson of his IronKey is not that he made a unique mistake. The lesson is that long-horizon password recall is a fundamentally unreliable cryptographic primitive.
Humans are bad at remembering high-entropy passwords for ten years. We are also bad at keeping single pieces of paper findable across the same span. Any security architecture whose recovery path depends on either of those abilities is gambling against time.
Recovery should never come down to one piece of paper and one person's memory.
Deadman Secrets uses a (2-of-3) Shamir threshold scheme by default. Three independent shares are generated, and any two can reconstruct the key. The math is the same primitive used by major exchanges and hardware security module vendors to eliminate single points of failure in institutional custody.
- Your share is derived from your passphrase on your own device. Forget it, and the other two shares can still cooperate.
- The hardware enclave share is sealed inside an AWS Nitro Enclave whose firmware is cryptographically measured. It is only released when your deadman conditions trigger. We cannot release it on a whim.
- The beneficiary share is sealed against the specific person you named — your spouse, your lawyer, your kid — and held by the service. When your deadman trigger fires, it is delivered to them. Combined with one of the other two shares it opens the vault. Alone it is useless to anyone.
- Pair the keys with a playbook. Don’t leave your family staring at an encrypted drive with a guess counter. Our ready-made “Access the crypto wallet” template walks them through which device, the recovery steps, and the order to do them in — with the password or seed attached where it’s needed.
If Stefan Thomas had used a 2-of-3 scheme, losing the paper would have been an inconvenience — not an eight-figure catastrophe. The hardware enclave plus a beneficiary could have reconstructed his key without ever touching the original password.
"I'll just be careful"
Every person who eventually loses a seed phrase started by being careful. Carefulness is not a backup strategy. It is a state of mind that decays under stress, sleep deprivation, house moves, divorces, hospital stays, and the simple grinding entropy of being alive for decades.
Bitcoin and similar systems are uniquely punishing here. There is no customer service department. There is no recovery vendor with a court order. There is no fraud team that can re-credit your account. The protocol is doing exactly what it promises to do — it is enforcing the mathematics of "not your keys, not your coins" with absolute literality. The flip side of that promise is that if you lose your keys, no one is coming.
The only countermeasure that scales is to make sure your keys can be reconstructed from multiple independent failure-mode shares — geographically, technologically, and socially distinct. That's not paranoia. That's just acknowledging that humans, paper, and decade-old memories all fail in different ways.
The drive that taught a generation
The Stefan Thomas IronKey is now one of the most-cited cautionary tales in modern cryptocurrency education. Chainalysis estimated in 2020 that of the roughly 18.5 million bitcoin mined to that point, somewhere around 3.7 million had been permanently lost — most of it to exactly this pattern of single-factor, single-custody failure. At current prices that is hundreds of billions of dollars sitting on the blockchain, visible to anyone, owned by no one who can spend it.
The drive will probably never be opened. The 7,002 BTC will probably stay on chain forever. What we have left from the story is the lesson — that the threshold between a fortune and a monument is whether more than one person, or more than one device, can cooperate to recover it.
Don't put a decade of savings behind one password.
Set up a real recovery plan in less than ten minutes. Your vault is split across three independent shares — losing any one of them is fine. Losing two takes an event none of us should have to plan for alone.
Start for Free