Coldcard Mk3 security advisory: seeds from firmware 4.0.1 onward may be at risk

#1

Post by nicou » Fri, Jul 31, 2026, 11:05 AM UTC

Coldcard Mk3 security advisory: seeds from firmware 4.0.1 onward may be at risk
blog.coinkite.com

Re: Coldcard Mk3 security advisory: seeds from firmware 4.0.1 onward may be at risk

#2

Post by finn888 » Fri, Jul 31, 2026, 11:14 AM UTC

72 bits is a nasty surprise. Testing with a small transaction first is good advice.

Re: Coldcard Mk3 security advisory: seeds from firmware 4.0.1 onward may be at risk

#3

Post by janandonly » Sat, Aug 01, 2026, 2:53 PM UTC

This is a big issue and more then 500 ₿ has been stolen already.

Makes me wonder why not a lot more was stolen?

Is the thief under the impression there will be a fork to retrieve stolen coins (2016 Ethereum style)?

I think the chance of that happening is very low so why not steal more?

Was this intended to simply rock the boat and make people aware?

If that benign reason is true then it could even be so that some % of stolen funds will be returned in good time.

Could also be it remains stolen (“finders fee” sort of nonsense).

Re: Coldcard Mk3 security advisory: seeds from firmware 4.0.1 onward may be at risk

#4

Post by paulpauper » Sat, Aug 01, 2026, 10:25 PM UTC

janandonly wrote: post #3

This is a big issue and more then 500 ₿ has been stolen already. Makes me wonder why not a lot more was stolen? Is the thief under the impression there will be a fork to retrieve stolen coins (2016 Ethereum style)? I think the chance of that happening is very low so why not steal more? Was this intended to simply rock the boat and make people aware? If that benign reason is true then it could even be so that some % o…

It was not that popular of a wallet and not all of them were affected