CoinTelegraph

Coldcard Forces Users to Generate New Seeds After Critical Security Flaw

August 21, 202607:13 AM
Coldcard Forces Users to Generate New Seeds After Critical Security Flaw

Coinkite has issued a critical security alert for Coldcard hardware wallet users, urging immediate generation of new seed phrases following the release of firmware 5.6.1 for Mk4 and Mk5 devices and 1.5.1Q for the Coldcard Q. The security upgrade fundamentally strengthens seed phrase generation by mandating user-supplied entropy combined with enhanced device randomness, addressing critical vulnerabilities in the previous implementation. This mandatory security measure comes with a stark warning: existing vulnerable seed phrases remain compromised despite the firmware update. The new protocol requires users to contribute entropy through at least 65 unpredictable keypresses, 50 rolls of a six-sided die, or 128 coin flips, which are then combined with randomness from multiple device sources including secure elements and hardware RNG. For maximum security, Coldcard users must generate new seed phrases immediately, as the old ones remain susceptible to potential breaches.

This is a summarized and adapted version by Artificial Intelligence. To read the complete original story, visit the official source.

Read Full Article at CoinTelegraph
QR Code Lightning

Support Jornal Bitcoin

Independent journalism, curated by AI, no clickbait. Keep the flame alive with any amount of BTC.

Wallet of Satoshi
jonata@walletofsatoshi.com

Daily Crypto Brief 📬

Subscribe to receive the curation of the most important Bitcoin and crypto news, summarized by AI. No spam.

Join more than 10,000 smart readers.

Related News

Nomura-backed Laser Digital secures Japan's first crypto exchange license in 4 years
CoinTelegraph★ Featured

Nomura-backed Laser Digital secures Japan's first crypto exchange license in 4 years

Nomura Group's digital asset subsidiary, Laser Digital, has received authorization to operate as a crypto asset exchange service provider under Japan's Payment Services Act (PSA). This marks the first crypto exchange approval in the country in four years, since Binance Japan received FSA authorization in October 2022. Japan's crypto market is entering a "new phase of maturity," creating a need for "trusted counterparties and infrastructure" as "institutional investors increase their interest in this asset class," said Jez Mohideen, co-founder and CEO of Laser Digital. This approval paves the way for Laser Digital to expand into providing domestic liquidity before moving into institutional crypto trading, positioning the company as a key player in Japan's growing digital financial ecosystem.
Binance Employees Detained in UAE Cleared and Released After Providing Statements
CoinTelegraph

Binance Employees Detained in UAE Cleared and Released After Providing Statements

Binance has confirmed that its employees detained in the United Arab Emirates have been cleared and released after providing statements to local authorities regarding third-party fund flows through a company client account. The employees, who were not targets of what the exchange described as 'routine inquiries,' were detained after being stopped at airports amid police investigations into possible financial crimes involving the exchange. The incident comes at a time of increasing regulatory scrutiny on cryptocurrency exchanges worldwide. Binance, the world's largest cryptocurrency exchange by trading volume, has been facing regulatory challenges in multiple jurisdictions. The release of the employees provides temporary relief for the company but highlights the ongoing challenges that cryptocurrency exchanges face when navigating a complex and rapidly evolving regulatory landscape.
Mantra Crypto Project Freezes Network After Security Incident, Token Plunges to All-Time Low
Portal do Bitcoin

Mantra Crypto Project Freezes Network After Security Incident, Token Plunges to All-Time Low

The Mantra tokenization project faces a critical confidence test after freezing its network following a security incident. The OM token has plummeted, approaching its all-time low as investor confidence erodes amid the crisis. The drastic measure of freezing the network deals a significant blow to the project's credibility, which aims to position itself as a robust solution for digital asset tokenization. Investors are questioning the protocol's security and governance, while the market reacts with mass selling and the project's market capitalization suffers a sharp decline.
Justin Sun keeps World Liberty fight public as its $4 billion stablecoin bank awaits final approval
CryptoSlate

Justin Sun keeps World Liberty fight public as its $4 billion stablecoin bank awaits final approval

Justin Sun has kept his legal battle with World Liberty Financial in public court after a California federal judge rejected the company's attempt to force all of his claims into private arbitration. The judicial decision maintains Sun's individual allegations in open court while World Liberty awaits final approval for its $4 billion stablecoin bank. The legal dispute gains significance as the cryptocurrency industry closely watches the case, which involves both legal questions and the future of one of the largest stablecoin proposals on the market. The refusal to keep the proceedings sealed and the decision to maintain allegations in public court highlight the regulatory complexities faced by crypto companies as they seek legitimacy and regulatory approval.
Iran's President Pleads for Peace as US Sanctions Threaten to Topple Government
Crypto Briefing

Iran's President Pleads for Peace as US Sanctions Threaten to Topple Government

Iran's President Masoud Pezeshkian is making a desperate plea for an end to regional conflicts as crippling US sanctions loom on the horizon. The escalating geopolitical tensions in the Middle East are threatening to destabilize Iran's political landscape, with analysts warning of potential consequences for the president's leadership tenure amid growing economic pressure.

The impending American sanctions, expected to be implemented in the coming weeks, pose an unprecedented challenge to Iran's economy and its nuclear program. The situation is exacerbating the humanitarian crisis in the country and increasing volatility in cryptocurrency markets, which many Iranians are using as a financial refuge. Pezeshkian's appeal may represent a last-ditch effort to prevent political and economic collapse, but the international response will ultimately determine the future of the regime.
Arizona Financial Firm to Pay Up to $5,000 Per Person in Data Breach Settlement
The Daily Hodl

Arizona Financial Firm to Pay Up to $5,000 Per Person in Data Breach Settlement

Arizona-based financial firm On Q Financial has agreed to a $1.25 million class action settlement following a February 2024 data breach that exposed client names and Social Security numbers. Affected individuals may receive up to $5,000 each as part of the settlement, marking a significant precedent in financial data breach cases. This case highlights the growing cybersecurity risks in the financial sector and the legal consequences for companies that fail to protect sensitive customer information. The settlement sets an important precedent for data breach victims, demonstrating that financial institutions can be held financially accountable for security failures.
Jornal Bitcoin Logo