Coldcard Flaw Shows Why Three Hardware Wallets May Share One Risk

1 month ago 16

Rommie Analytics

Key Takeaways

  • Existing affected seeds require fresh replacement keys.
  • Copied seeds create copies of one signer.
  • One compromised key stays below 2-of-3.
  • Recovery requires the complete wallet descriptor.
  • Test spending with one signer unavailable.

Affected Coldcard seeds need new keys

Installing a fixed release leaves every private key derived earlier unchanged. Coldcard’s current security guidance directs affected holders to generate a fresh seed and move the funds after verifying the new wallet.

The company documents an exception for seeds created with at least 50 fair, independent and private dice rolls. The final words must have been produced after the rolls, and the sequence must have remained secret. Coldcard advises passphrase users to migrate as soon as practical because the passphrase leaves the underlying seed unchanged.

Coindoo’s Read Entire Article