Coldcard Issues New Statement Regarding the Major Bitcoin Hack

Hardware wallet manufacturer Coldcard has issued a new high-priority security alert, stating that the cryptographic threat affecting its users is far from over. The company advises all users to move their Bitcoin assets to newly created wallets and generate entirely new recovery words (seed phrases).

According to Coldcard, the risk posed by the security vulnerability affecting the key generation process, which is associated with losses of approximately $40 million, persists. Users are advised to update their firmware and stop using addresses generated via outdated derivation methods to prevent unauthorized asset transfers.

The company also denied claims that the current firmware permanently rendered Coldcard devices unusable. Coldcard stated that in the event of a temporary random number generator (TRNG) error, disconnecting and restarting the device from all power sources should resolve the issue under normal hardware conditions.

The statement released by Coldcard included the following:

“Claims that the latest software permanently renders Coldcard devices unusable are incorrect. In the event of a TRNG error, completely disconnect the device and restart it. The situation is temporary; no data will be written to the flash memory, and the system is designed to shut down safely.”

Developers also stated that there is no evidence that the current TRNG fix permanently breaks devices. They explained that if a temporary TRNG seed error occurs, completely shutting down and restarting the device is expected to restore normal operation.

However, developers are working on a new patch to make the post-error recovery process of the random number generation system more secure. The proposed update will follow the documented recovery procedure of chip manufacturer STMicroelectronics and will include additional safety measures such as a limited number of retries, seed error detection, and the deletion of old RNG outputs after recovery.

It was announced that support for Coldcard Mk3 devices will be addressed in a separate software update.

*This is not investment advice.