COLDCARD

@COLDCARDwallet

SECURITY ADVISORY ⚠️ check blogpost | The best #bitcoin hardware wallet 🙌 Ultra-secure.The only dedicated air-gapped. Backup on SEEDPLATE from @Coinkite

Bitcoin

coldcard.com

Born January 1

Joined December 2017

Following

67.9K

Followers

Replies Articles Media

Pinned
COLDCARD
@COLDCARDwallet
Jul 31
🚨URGENT COLDCARD SECURITY UPDATE Read carefully before acting. 👉Mk3 seed generated on 4.0.1+ without ≥50 private, independent dice rolls: begin a careful migration now. 👉Mk4/Mk5 <5.6.0 or Q <1.5.0Q: update first, generate a new seed, then migrate. blog.coinkite.com/entropy-techni…
COLDCARD
@COLDCARDwallet
Jul 31
The first post was the advisory and what users should do. This second post has the technical details: what actually went wrong, why our reviews missed it, the impact across Mk3/Mk4/Q/Mk5, and what we changed. blog.coinkite.com/entropy-techni… ( current evaluating Mk3 firmware release )
COLDCARD
@COLDCARDwallet
Aug 14
Important: If you generated a seed on affected firmware and haven’t migrated, update your COLDCARD, create a new seed with our guidance, then move your funds to it. Updating alone does not secure an affected seed. Migration, dice and passphrase guidance: coldcard.com/security/status
COLDCARD
@COLDCARDwallet
Aug 7
If you would like us to apply our existing retention policies to your data, we will exempt them from this protocol. Please confirm that you do not want us to preserve your data by contacting support @ coinkite . com
COLDCARD
@COLDCARDwallet
Aug 7
Update on Customer Data Retention We want to inform our customers of a change to our data-handling practices in connection with the security incident disclosed on July 30, 2026. As many of you know, our standard practice has been to automatically blank customer records after
COLDCARD
@COLDCARDwallet
Aug 7
Update on Customer Data Retention We want to inform our customers of a change to our data-handling practices in connection with the security incident disclosed on July 30, 2026. As many of you know, our standard practice has been to automatically blank customer records after
blog.coinkite.com
COINKITE Blog
Stay up to date with Coinkite — COLDCARD, Opendime, Tapsigner, Blockclock. Firmware releases, security research, and Bitcoin cold storage.
COLDCARD
@COLDCARDwallet
Aug 7
Extremely important correction. @jackmallers there wasn’t a weak entropy fallback. I think it’s important to be precise about what actually happened. The weak PRNG (Yasmarang) wasn’t Coinkite’s fallback—it was MicroPython’s built-in general-purpose RNG, introduced upstream in
THE JACK MALLERS SHOW
@jackmallersshow
Aug 5
Jack explains the ColdCard hack in non-technical terms:
00:00