TLDR InfoSec · QUICK LINKS

COLDCARD WALLET RNG FLAW LIKELY LINKED TO $88 MILLION BITCOIN THEFT

links.tldrnewsletter.com3 min read

Summary from the TLDR InfoSec newsletter

An integration bug in COLDCARD firmware caused it to fall back to MicroPython's insecure Yasmarang generator instead of the onboard STM32 hardware RNG, letting attackers brute-force seeds offline and drain roughly 1,367 BTC ($88.6 million) from thousands of wallets across affected Mk2 through Mk5 and Q devices before Coinkite's July 30 disclosure.