TLDR InfoSec · QUICK LINKS
COLDCARD WALLET RNG FLAW LIKELY LINKED TO $88 MILLION BITCOIN THEFT
Summary from the TLDR InfoSec newsletter
An integration bug in COLDCARD firmware caused it to fall back to MicroPython's insecure Yasmarang generator instead of the onboard STM32 hardware RNG, letting attackers brute-force seeds offline and drain roughly 1,367 BTC ($88.6 million) from thousands of wallets across affected Mk2 through Mk5 and Q devices before Coinkite's July 30 disclosure.