I wish I could say I was comforted

COLDCARD EDGE UPDATE

Edge hotfixes are now public:
• Mk4/Mk5: 6.6.0X
• Q: 6.6.0QX

Seed generated on older Edge firmware without ≥50 private, independent dice rolls? Update first, create a new seed, then migrate. Updating alone does not repair it.

http…

Yesterday, a serious flaw was disclosed in Coldcard’s seed-generation process. Funds linked to affected seeds are already being stolen.

We know Passport owners will have one immediate question: is my seed affected?

If your seed was generated on Passport…

EMERGENCY: Your COLDCARD Seed May Be Broken. What To Do https://x.com/i/broadcasts/1pKkOOlOmydKj

Fees creeping up. Funds are moving, one way or another.

Your knee-jerk response yesterday was understandable, but you spread misinfo as a result. It is NOT just the mk3 that is affected, it's basically every coldcard model. Someone I know personally was robbed from a seed generated on their mark 4 within hours…

I used GPT 5.6 with Cyber access to review seed generation in Keystone, BitBox02, Blockstream Jade, and Trezor. I found no Coldcard-style low-entropy bugs. Caveat: legacy Keystone’s underlying HRNG library is closed, so it can’t be fully source-audited. …

I’m so sorry to everyone affected. My DMs are open if you need help or have any questions.

Firmware fix released. https://coldcard.com/docs/upgrade/

@Seedsigner is something you can build yourself, using off the shelf, non-bitcoin specific parts. You can verify and even modify the code yourself before loading it, and the device can not connect to the internet - true airgap. You can do this, easily.

It’s a good time to review and carefully upgrade your security.

Stronger passphrases, 99+ dice rolls for entropy (or use solid software like bitcoind) for seed generation, separate/split funds into smaller amounts in hot vs cold setups, multisig, encrypt…

Our lead developer @KeithMukai has actually been dipping into his own bitcoin savings to continue work on SeedSigner, and our lead maintainer @newtonick works on the project pro bono as well. If you get value from @SeedSigner consider sending them a few sats…

⚠️ Bitcoin cold storage is finished and I only have one thing to say to @nvk

⚠️ Regarding @nvk in 2024

⚠️ Seemingly everywhere you look right now, Bitcoin is buried in malignancy and deceit. The influencers have betrayed us.

An AI agent published a malicious package to PyPI and 15 systems ran it within an hour. What Anthropic's incident means for supply chain security.

Tenha acesso agora mesmo a todo o conteúdo exclusivo para assinantes da Rural Business, conteúdos na integra, além de cotações, gráficos, análises de mercados diárias de Soja, Milho, Boi, Leite, Suínos e Frangos, acesso ilimitado a todas as séries investigativas…

You have NO IDEA how deep this sheet goes

Vcs realmente não percebem que quando estamos todos falando em um assunto sério e relevante, que ameaça o status quo. daí, de repente aparece um outro assunto plantado, com fotos e filmagem profissionais e todooo mundo é pautado pelo novo tema e esquece do…

Interessante que os mesmos alimentos que servem para desparasitar também auxiliam na cura da flora intestinal.