flash on Nostr: ⚡️🚨 ALERT - COLDCARD RNG FAILURE WORSE THAN PREVIOUSLY THOUGHT A new technical ...
⚡️🚨 ALERT - COLDCARD RNG FAILURE WORSE THAN PREVIOUSLY THOUGHT
A new technical autopsy by Kevin Loaec finds some vulnerable COLDCARD Mk3 wallets may have been generated from just approximately 4.5 million possible RNG starting states, a space small enough to search in about 3 seconds on a single RTX 4090.
Even accounting for additional uncertainty about how each wallet was generated, they estimate an attacker could search the possibilities in about 50 minutes on a single high-end GPU.
Even worse, the flaw may have created identical seed words across different devices.
Using an assumed fleet of 30,000 Mk3s, the author estimates roughly 120 pairs could have produced the same RNG stream.
That collision estimate is theoretical but clearly shows duplicate seeds could have easily existed.
Published at
2026-08-11 21:46:23 UTCEvent JSON
{
"id": "9aea0acb87d0f3445b93d915d50990a939d2851a78bae2e21a8aff5ce4650d85",
"pubkey": "4d7842051782e0d3feb034d150adc2b6bae4ee3b49786793bffa468b6f5b96b3",
"created_at": 1786484783,
"kind": 1,
"tags": [
[
"imeta",
"url https://blossom.primal.net/6853c2ce7a352ac20a372a04b9883b73815cfb6c9ab8ec8f4f70ce51c327eaa0.jpg",
"m jpeg",
"dim 1672.0x941.0"
],
[
"imeta",
"url https://blossom.primal.net/7ed9386cca2f66d40efc6222a525767378eb14af2e47b351a9f83361bb5b81b5.jpg",
"m jpeg",
"dim 1920.0x1433.0"
],
[
"client",
"Primal iOS"
]
],
"content": "⚡️🚨 ALERT - COLDCARD RNG FAILURE WORSE THAN PREVIOUSLY THOUGHT\n\nA new technical autopsy by Kevin Loaec finds some vulnerable COLDCARD Mk3 wallets may have been generated from just approximately 4.5 million possible RNG starting states, a space small enough to search in about 3 seconds on a single RTX 4090.\n\nEven accounting for additional uncertainty about how each wallet was generated, they estimate an attacker could search the possibilities in about 50 minutes on a single high-end GPU.\n\nEven worse, the flaw may have created identical seed words across different devices.\n\nUsing an assumed fleet of 30,000 Mk3s, the author estimates roughly 120 pairs could have produced the same RNG stream. \n\nThat collision estimate is theoretical but clearly shows duplicate seeds could have easily existed.\nhttps://blossom.primal.net/6853c2ce7a352ac20a372a04b9883b73815cfb6c9ab8ec8f4f70ce51c327eaa0.jpg\nhttps://blossom.primal.net/7ed9386cca2f66d40efc6222a525767378eb14af2e47b351a9f83361bb5b81b5.jpg",
"sig": "92012e1dd67f48b28bdc37d4079b7261809698bcb2466beb3ff6daf5c2c540a111bdac19829621264bc170843f1dfb65b85bcd4add213784ffaff08b2c635fa3"
}
