TREE NEWS reports: Coinkite released firmware versions 5.6.1 and 1.5.1Q that require user-supplied entropy (dice rolls or coin flips) for every new seed, following a vulnerability that compromised seeds generated on earlier versions. The update does not repair seeds already created on affected firmware, leaving users with potentially compromised wallets.
Coldcard Firmware Forces User Entropy After $114M Seed Failure
The fix is forward-looking only, which is the crux: affected users cannot remediate by patching, since the flaw lives in seeds already generated, not in the software going forward. Mandating external entropy shifts responsibility onto the user at the moment of setup, a meaningful change for anyone provisioning hardware wallets on the assumption that device randomness alone suffices. The open question is how many seeds were created on the vulnerable versions and whether affected holders migrate to new wallets.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.