logo
    • Buy Crypto
    • Markets
    • Futures
    • Spot
    • Earn
    • Affiliates & AI
    • More
    1. WEEX
    2. Crypto News
    3. Coldcard now requires 65 key presses after seed exploit, while exposed funds still must move

    Coldcard now requires 65 key presses after seed exploit, while exposed funds still must move

    By: cryptoslate.com|2026/08/23 05:00:07
    0
    Share
    copy
    Prefer us on GooglePrefer us on Google
    SNTSNT
    00.00%--
    ZRXZRX
    00.00%--
    FLOWFLOW
    00.00%--
     

    Coinkite, the maker of the Coldcard Bitcoin hardware wallet, released new standard firmware on Aug. 20 that forces users to add physical randomness whenever they generate a seed.

    Owners who generate a seed after installing the current fixed release can use the hardened process. Owners still relying on a seed produced by affected firmware must generate another seed and transfer the funds unless that wallet meets the dice-roll exception.

    During standard seed creation, every seed combines fresh device entropy with one required human input source: at least 65 key presses made at unpredictable intervals, 50 rolls of a physical six-sided die, or 128 physical coin flips. The requirement reduces reliance on the wallet's random-number generator alone.

    Coldcard's current security status recommends version 5.6.1 for Mk4 and Mk5 devices and 1.5.1Q for Q devices. The advisory's exposure list is wider and track-specific. Coinkite's official migration guidance covers Mk2 and Mk3 firmware 4.0.1 through 4.1.9; Mk4 and Mk5 standard firmware before 5.6.0 and Edge firmware before 6.6.0X; and Q standard firmware before 1.5.0Q and Edge firmware before 6.6.0QX.

    Block's independent technical analysis uses a broader Mk2 and Mk3 boundary that includes version 4.0.0. Owners of that release should not treat the vendor boundary as proof of safety.

    Installing fixed firmware does not change an old seed. Unless the advisory's dice exception applies, Coinkite's migration guide tells affected users to generate a genuinely new seed, verify its backup and wallet fingerprint, confirm a receiving address on the device, send a small test transaction, and then transfer every balance tied to the old seed. Cloning or restoring the wallet does not create a new seed.

    Migration is not required for this RNG flaw when the user added at least 50 fair, independent and private physical die rolls through the affected workflow and never recorded or exposed the sequence. Fewer rolls, or uncertainty about those conditions, means the user should migrate.

    Block traced the original defect to code that could route requests to a deterministic MicroPython fallback because a feature flag defined as zero was treated as present. Mandatory human input adds outside entropy to new standard seeds, limiting damage if device randomness fails again. It cannot retroactively add entropy to a seed that already exists.

    Coldcard treats the mixed flow differently from the advanced Dice Rolls Only option. That mode excludes hardware randomness and requires 50 rolls for a 12-word seed or 99 for a 24-word seed.

    The firmware package reaches signing and data paths too. It binds USB review to a staged PSBT checksum, rechecks transaction bytes before signing, blocks SIGHASH_SINGLE modes by default, restricts USB downloads to the current encrypted-session result, and validates firmware file length. It adds persistent RNG-fault stops, a boot-time hardware-RNG linkage check, more Delta Mode isolation, and active-wallet backup behavior.

    The status page lists targeted source review, a real-device RNG-path test, and a reproducible build and dice-path trace, but Coldcard says they do not amount to a full audit of every fixed binary. Coinkite says some customers suffered severe losses and law enforcement is investigating, but it has not published a verified victim count or loss total.

    -- Price

    --
    --
    --

    This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.

    You may also like

    Cryptocurrency Transfer Tax Effective from July 1

    Cryptocurrency Transfer Tax Effective from July 1

    The tax on cryptocurrency and digital asset transfers is being collected under new rules starting July 1. These rules pertain to the transfer of such assets through service providers: income from the transaction is classified as other income for individuals and is subject to income tax at a rate of ...
    Controversy Over Shibarium Abandonment Leads to K9 Finance DAO's Decision to Halt Operations

    Controversy Over Shibarium Abandonment Leads to K9 Finance DAO's Decision to Halt Operations

    The controversy surrounding the abandonment of Shibarium, a Layer 2 network in the Shiba Inu (SHIB) ecosystem, is intensifying due to the re-indexing of the explorer and the withdrawal of some ecosystem projects.
    Georgia, Cryptocurrency and Sanctions: How a British Schoolboy Uncovered Russia's Shadow Network

    Georgia, Cryptocurrency and Sanctions: How a British Schoolboy Uncovered Russia's Shadow Network

    Georgia has found itself at the center of a major cryptocurrency scandal: European authorities suspect registered platforms in the country of assisting Moscow in circumventing restrictions, and the investigation by 17-year-old Alexander Browder has unexpectedly become part of a larger story about sa...
    Russians Ask What Is Happening with Ethereum: Interest in ETH Surges

    Russians Ask What Is Happening with Ethereum: Interest in ETH Surges

    Search queries about what is happening with Ethereum have noticeably increased in Russia, and a sharp rise in interest in ETH futures has been recorded on the Moscow Exchange's derivatives market. Market participants explain this in various ways: some talk about a return of attention to major crypto...
    SEC proposes a path for crypto projects to raise $75 million and later end the token’s securities contract

    SEC proposes a path for crypto projects to raise $75 million and later end the token’s securities contract

    The SEC’s Regulation Crypto Assets proposal could let projects raise up to $75M and later end the investment contract tied to their tokens.
    MANTRA Chain resumes blocks after Cosmos-EVM fix

    MANTRA Chain resumes blocks after Cosmos-EVM fix

    Treasury just put a deadline on offshore stablecoins’ access to US customers

    Treasury just put a deadline on offshore stablecoins’ access to US customers

    Tether’s USDT could face new US exchange restrictions in 2028 as Treasury proposes GENIUS Act rules for foreign-issued stablecoins.
    Tencent Chip Head Gao Jianlin Leaves to Start RISC-V AI CPU Venture

    Tencent Chip Head Gao Jianlin Leaves to Start RISC-V AI CPU Venture

    Utorg Launches iPhone App, Official Channel Statements Diverge

    Utorg Launches iPhone App, Official Channel Statements Diverge

    Utorg has announced the launch of its consumer app for iPhone, named Utapp, but the service descriptions on its official site and terms of service are still inconsistent. The app is said to bundle self-custody wallets, cards, and gasless swap features, but the wording surrounding the actual offering...
    How Big is Iran's Cryptocurrency Market Really? Tracing Billions of Dollars of Iranian Money on the Blockchain

    How Big is Iran's Cryptocurrency Market Really? Tracing Billions of Dollars of Iranian Money on the Blockchain

    Galaxy Research Director Envisions New Crypto Regulations Providing Legal Path for Token Issuance in the U.S.

    Galaxy Research Director Envisions New Crypto Regulations Providing Legal Path for Token Issuance in the U.S.

    EU Digital Identity Wallet Mandated for Member States by End of 2026

    EU Digital Identity Wallet Mandated for Member States by End of 2026

    Discussions on the use of identity in blockchain are shifting from token issuance to cross-border credential verification and compliance automation. The key lies not in creating new identities but in ensuring interoperability.
    Kyiv to Announce Tender for Restoration of Paton Bridge

    Kyiv to Announce Tender for Restoration of Paton Bridge

    CRD VI: Non-EU Banks Have 5 Months to Open a Branch

    CRD VI: Non-EU Banks Have 5 Months to Open a Branch

    The CRD VI directive will require non-EU banks to have an authorized branch to serve European clients starting January 11, 2027, with a narrow exception.
    US OCC Accelerates Stablecoin Regulatory Framework! Aiming to Finalize the GENIUS Act Rules by November

    US OCC Accelerates Stablecoin Regulatory Framework! Aiming to Finalize the GENIUS Act Rules by November

    Massive Data Breach: 5 French Organizations Affected on the Same Day

    Massive Data Breach: 5 French Organizations Affected on the Same Day

    Five French organizations targeted by leaks on August 21: Beauty Success, Bureau Vallée, Made in Bébé, Allobébé, and Civil Protection.
    Bitcoin Demand Surpasses 25,000 BTC, Reaches Highest Level This Year

    Bitcoin Demand Surpasses 25,000 BTC, Reaches Highest Level This Year

    Bitcoin (BTC) on-chain demand has surpassed 25,000 BTC, reaching the highest level recorded in 2026. The key confirmation point is whether spot demand continues to absorb new supply.
    Binance continues EU onboarding despite missing MiCA licensing deadline: report

    Binance continues EU onboarding despite missing MiCA licensing deadline: report

    MANTRA Chain Cosmos EVM Module Security Incident Under Control, User Funds Not Affected

    MANTRA Chain Cosmos EVM Module Security Incident Under Control, User Funds Not Affected

    If an Iranian Exchange Goes Bankrupt, Is the User the Owner of the Assets or a Creditor?

    If an Iranian Exchange Goes Bankrupt, Is the User the Owner of the Assets or a Creditor?

    HTX Research's Latest Report Analyzes AI Assets in the US Stock Market: Technology Still in Early Stages, Capital Expenditure and Valuation Entering Later Cycle

    HTX Research's Latest Report Analyzes AI Assets in the US Stock Market: Technology Still in Early Stages, Capital Expenditure and Valuation Entering Later Cycle

    Ripple Partners with Clearpool and Cicada to Build Lending and Credit Trading Infrastructure for Institutional Investors on XRPL

    Ripple Partners with Clearpool and Cicada to Build Lending and Credit Trading Infrastructure for Institutional Investors on XRPL

    National Cryptocurrency Association Ripple: 67 Million Americans Own Crypto

    National Cryptocurrency Association Ripple: 67 Million Americans Own Crypto

    Google Offers One Year Free Google AI Subscription for College Students

    Google Offers One Year Free Google AI Subscription for College Students

    Ukraine's Dairy Exports Increase, but EU Control Tightens

    Ukraine's Dairy Exports Increase, but EU Control Tightens

    Prediction Platform SafeBets Launches, Unicoin Faces SEC Lawsuit

    Prediction Platform SafeBets Launches, Unicoin Faces SEC Lawsuit

    Ripple Prioritizes Institutional Financial Infrastructure Strategy Over IPO

    Ripple Prioritizes Institutional Financial Infrastructure Strategy Over IPO

    Ripple is prioritizing its institutional infrastructure strategy that connects traditional finance and digital assets over an initial public offering (IPO). Brad Garlinghouse, the CEO of Ripple...
    Canaan reports Ethiopia mining paused at 4.96 EH/s in July

    Canaan reports Ethiopia mining paused at 4.96 EH/s in July

    Canaan placed 4.96 EH/s in its operating column, while a footnote said Ethiopia mining was paused.
    Cryptocurrency Transactions: What Will Change for Investors in Russia

    Cryptocurrency Transactions: What Will Change for Investors in Russia

    Starting from September 1, 2026, cryptocurrency transactions in Russia will have clear rules: a new law will allow such operations but will impose serious restrictions and remind investors of the high risks involved. The law "On Digital Currencies and Digital Rights" introduces a legal framework for...
    GnoLand Unveils AI Tool and Security System 'GnoMCP'

    GnoLand Unveils AI Tool and Security System 'GnoMCP'

    The smart contract platform GnoLand is applying artificial intelligence (AI) across development and security to expand its developer ecosystem and platform utilization. On the 19th, GnoLand introduced AI coding tools and GnoLand's...

    Cryptocurrency Transfer Tax Effective from July 1

    The tax on cryptocurrency and digital asset transfers is being collected under new rules starting July 1. These rules pertain to the transfer of such assets through service providers: income from the transaction is classified as other income for individuals and is subject to income tax at a rate of ...

    Controversy Over Shibarium Abandonment Leads to K9 Finance DAO's Decision to Halt Operations

    The controversy surrounding the abandonment of Shibarium, a Layer 2 network in the Shiba Inu (SHIB) ecosystem, is intensifying due to the re-indexing of the explorer and the withdrawal of some ecosystem projects.

    Georgia, Cryptocurrency and Sanctions: How a British Schoolboy Uncovered Russia's Shadow Network

    Georgia has found itself at the center of a major cryptocurrency scandal: European authorities suspect registered platforms in the country of assisting Moscow in circumventing restrictions, and the investigation by 17-year-old Alexander Browder has unexpectedly become part of a larger story about sa...

    Russians Ask What Is Happening with Ethereum: Interest in ETH Surges

    Search queries about what is happening with Ethereum have noticeably increased in Russia, and a sharp rise in interest in ETH futures has been recorded on the Moscow Exchange's derivatives market. Market participants explain this in various ways: some talk about a return of attention to major crypto...

    SEC proposes a path for crypto projects to raise $75 million and later end the token’s securities contract

    The SEC’s Regulation Crypto Assets proposal could let projects raise up to $75M and later end the investment contract tied to their tokens.

    MANTRA Chain resumes blocks after Cosmos-EVM fix

    ...
    One account, every market
    Trade stocks, gold, oil and more!
    One account, every marketTrade now

    Contents

    status

    Latest articles

    08/23/2026

    Coldcard now requires 65 key presses after seed exploit, while exposed funds still must move

    Firmware 5.6.1 and 1.5.1Q harden new wallet creation but cannot repair a seed made on an affected release.
    SNTSNT
    00.00%--
    ZRXZRX
    00.00%--
    FLOWFLOW
    00.00%--
    08/23/2026

    Cryptocurrency Transfer Tax Effective from July 1

    The tax on cryptocurrency and digital asset transfers is being collected under new rules starting July 1. These rules pertain to the transfer of such assets through service providers: income from the transaction is classified as other income for individuals and is subject to income tax at a rate of ...
    SNTSNT
    00.00%--
    BTCBTC
    00.00%--
    08/22/2026

    Georgia, Cryptocurrency and Sanctions: How a British Schoolboy Uncovered Russia's Shadow Network

    Georgia has found itself at the center of a major cryptocurrency scandal: European authorities suspect registered platforms in the country of assisting Moscow in circumventing restrictions, and the investigation by 17-year-old Alexander Browder has unexpectedly become part of a larger story about sa...
    SNTSNT
    00.00%--
    SCRTSCRT
    00.00%--
    ICXICX
    00.00%--
    08/22/2026

    Russians Ask What Is Happening with Ethereum: Interest in ETH Surges

    Search queries about what is happening with Ethereum have noticeably increased in Russia, and a sharp rise in interest in ETH futures has been recorded on the Moscow Exchange's derivatives market. Market participants explain this in various ways: some talk about a return of attention to major crypto...
    MOVEMOVE
    00.00%--
    JSTJST
    00.00%--
    SNTSNT
    00.00%--
    ETHETH
    00.00%--
    08/22/2026

    SEC proposes a path for crypto projects to raise $75 million and later end the token’s securities contract

    The SEC’s Regulation Crypto Assets proposal could let projects raise up to $75M and later end the investment contract tied to their tokens.
    SNTSNT
    00.00%--
    BTCBTC
    00.00%--
    More

    Latest coin listings on WEEX

    logoCommunity
    iconiconiconiconiconiconicon
    Customer Support:@weikecs
    Business Cooperation:@weikecs
    Quant Trading & MM:bd@weex.com
    VIP Program:support@weex.com
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Customer Support Bot
    • VIP Services
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE
    • About Us
    • Announcement Center
    • Media Kit
    • WEEX Community
    • WXT Zone
    • Announcement
    • Help Center
    • Fee Schedule
    • Trading Rules
    • WEEX Academy
    • Contact Verifier
    • Submit Feedback
    • Legal Statement
    • Risk Disclosure
    • Terms and Policies
    • Privacy Policy
    • Whistleblower Notice
    • AML/CTF Policy
    • Law Enforcement
    • Customer Support Bot
    • VIP Services
    • Futures
    • Spot
    • Copy Trade
    • Markets
    • WEEX Store
    • Proof of Reserves
    • Invite Friends
    • OTC
    • Download
    • Affiliate
    • VIP Program
    • API
    • Broker
    • Listing Application
    • Affiliate T&C
    • Sitemap
    • User Guide
    • Product Launches
    • Crypto News
    • Product Launches
    • Crypto Wiki
    • Learn
    • Q&A
    • Spot
    • Futures
    • Glossary
    • VIP Program
    • Download
    • Affiliate
    • Protection Fund
    • Proof of Reserves
    • Sitemap
    • ETFs
    • Crypto Prices
    • Price Predictions
    • WXT Price
    • BTC Price
    • ETH Price
    • DOGE Price
    • How to Buy Crypto
    • How to Buy WXT
    • How to Buy BTC
    • How to Buy ETH
    • How to Buy DOGE

    Where new wealth is made

    Download app

    Sign Up
    h5 logo
    Download