COLDCARD BUG DEMO: Duplicate Wallet Found in 4.7 Seconds Developer John S built a simulator to illustrate the severity of the COLDCARD #entropy bug. On an M1 Max, it found two identical wallet seeds after generating about 1.26 million seeds, taking just 4.7 seconds. Statistically, a duplicate seed would be expected roughly once every 1.3 million wallet generations under the simulated 40-bit entropy model. He says the most concerning part is that this kind of test could have been run in seconds...
Nitter
Bitcoin News (@BitcoinNewsCom)
COLDCARD BUG DEMO: Duplicate Wallet Found in 4.7 Seconds
Developer John S built a simulator to illustrate the severity of the COLDCARD entropy bug.
On an M1 Max, it found two identical wallet seeds after generating about 1.26 million seeds, taking just…
Developer John S built a simulator to illustrate the severity of the COLDCARD entropy bug.
On an M1 Max, it found two identical wallet seeds after generating about 1.26 million seeds, taking just…
RT by @skwp: Coinkite has now confirmed the #entropy bug also impacts Mk4, Mk5, and Q models. Seeds generated on a Mk3 are severely affected; seeds generated on a Mk4, Mk5, or Q are also weakened, though harder to crack.
Our recommendation: if any key in your wallet or multisig quorum came from a seed generated on a Coldcard (without dice rolls or a passphrase), replace that key and migrate funds to a new wallet. You can generate the new seed on a different vendor’s hardware, or continue with...
Our recommendation: if any key in your wallet or multisig quorum came from a seed generated on a Coldcard (without dice rolls or a passphrase), replace that key and migrate funds to a new wallet. You can generate the new seed on a different vendor’s hardware, or continue with...
RT by @ausbtcclub: I just sent the following to my mailing list subscribers👇 This is an emergency update! A number of #Coldcard models have been found to be using insufficient #entropy generation, meaning the way they have generated private keys hasn't been secure enough. An attacker or attackers have just figured out how to exploit this new vulnerability. If you use a Coldcard, you should seriously consider moving your funds. Those most at risk are those using only a single signature, no passp...
Nitter
Luke de Wolf | BIP-110 (@lukedewolf)
I just sent the following to my mailing list subscribers👇
This is an emergency update!
A number of Coldcard models have been found to be using insufficient entropy generation, meaning the way they have generated private keys hasn't been secure enough.…
This is an emergency update!
A number of Coldcard models have been found to be using insufficient entropy generation, meaning the way they have generated private keys hasn't been secure enough.…