Technically, they will be safe even after a firmware update. The problem wasn't really some mystery technical bug. The firmware just used a fallback, known insecure, RNG for key generation, because of a bug in one line of code.
That said, entropy is very well studied and understood, and most devs are very careful about it. The fact that the Coldcard devs weren't testing and doing statistical analysis on their generated keys after each version is borderline criminal negligence, and I look forward theit company dying the death it deserves after such a colossal breach of trust with their customers.
Sattrio
npub1qq…pnuvn
2026-08-01 16:22:33
in reply to nevent1q…d3sd
Author Public Key
npub1qqqqqqpjywd0ggm6uscezytg24ke9kuahss47t780urst5sce7aqspnuvnSeen on
wss://relay.damus.ioPublished at
2026-08-01 16:22:33Event JSON
{
"id": "2b2da84d60f4b46ef2404613ea8d802bce12c1d0ee09c3a5a142397d0020e38b",
"pubkey": "0000000032239af4237ae431911168556d92db9dbc215f2fc77f0705d218cfba",
"created_at": 1785601353,
"kind": 1,
"tags": [
[
"alt",
"A short note: Technically, they will be safe even after a firmwa..."
],
[
"e",
"06843870b861a8ccff08db4bff0f8a549ef213d9e59ad766e7ae9752ca8bd7c8",
"wss://nostr.bitcoiner.social/",
"root",
"34896f323ef0e88db37cc58745127149cf0f3e59c09346a022f33b06d5f07625"
],
[
"p",
"34896f323ef0e88db37cc58745127149cf0f3e59c09346a022f33b06d5f07625",
"wss://relay.bitcoinpark.com/"
],
[
"client",
"Amethyst"
]
],
"content": "Technically, they will be safe even after a firmware update. The problem wasn't really some mystery technical bug. The firmware just used a fallback, known insecure, RNG for key generation, because of a bug in one line of code.\n\nThat said, entropy is very well studied and understood, and most devs are very careful about it. The fact that the Coldcard devs weren't testing and doing statistical analysis on their generated keys after each version is borderline criminal negligence, and I look forward theit company dying the death it deserves after such a colossal breach of trust with their customers.",
"sig": "7407816b4f336b51ddbd4dc809e4635b0def9dce97ebaa1363c12d34f2bd31ca9e2339d886310a1bc9d99d066c8c2d175dcf1bd6e3e73b36bd019a6761859d8f"
}