Press Enter to search · ESC to close

Crypto

Coldcard Firmware Forces User Entropy After $114M Seed Failure

Coinkite released firmware versions 5.6.1 and 1.5.1Q that require user-supplied entropy (dice rolls or coin flips) for every new seed, following a vulnerability that compromised seeds generated on earlier versions. The update does not repair seeds already created on affected firmware, leaving users with potentially compromised wallets.

Original source

AI take

The fix is forward-looking only, which is the crux: affected users cannot remediate by patching, since the flaw lives in seeds already generated, not in the software going forward. Mandating external entropy shifts responsibility onto the user at the moment of setup, a meaningful change for anyone provisioning hardware wallets on the assumption that device randomness alone suffices. The open question is how many seeds were created on the vulnerable versions and whether affected holders migrate to new wallets.

Generated by AI for reference only.

Share

Related News

TREE NEWS share card
Long-press image above → Save to Photos / Share
Pitch us Feedback