Laser on Nostr: You're missing something. 1 of 2 - Peter created an alias named 'Switck' which ...

You're missing something.

1 of 2 - Peter created an alias named 'Switck' which authored the Coinkite exploit.

quoting
nevent1q…6wxc

1. Peter (as switck) wrote the broken #ifndef guard in libngu (Jan 2021).

2. Peter (as doc-hex) integrated libngu into #Coldcard firmware and changed seed generation to use it (March 2021).

3. The combination caused ngu.random.bytes() → MicroPython Yasmarang software PRNG (seeded from UID + timers) instead of the hardware TRNG.

Result: seeds with ~40 bits effective entropy on Mk2/Mk3 (and ~72 bits on later models that mixed in some secure-element data), which "attackers" later brute-forced.

#Bitcoin

nevent1q…4tdn