CoinTelegraph

Coldcard Forces Users to Generate New Seeds After Critical Security Flaw

August 21, 202607:13 AM
Coldcard Forces Users to Generate New Seeds After Critical Security Flaw

Coinkite has issued a critical security alert for Coldcard hardware wallet users, urging immediate generation of new seed phrases following the release of firmware 5.6.1 for Mk4 and Mk5 devices and 1.5.1Q for the Coldcard Q. The security upgrade fundamentally strengthens seed phrase generation by mandating user-supplied entropy combined with enhanced device randomness, addressing critical vulnerabilities in the previous implementation. This mandatory security measure comes with a stark warning: existing vulnerable seed phrases remain compromised despite the firmware update. The new protocol requires users to contribute entropy through at least 65 unpredictable keypresses, 50 rolls of a six-sided die, or 128 coin flips, which are then combined with randomness from multiple device sources including secure elements and hardware RNG. For maximum security, Coldcard users must generate new seed phrases immediately, as the old ones remain susceptible to potential breaches.

This is a summarized and adapted version by Artificial Intelligence. To read the complete original story, visit the official source.

Read Full Article at CoinTelegraph
QR Code Lightning

Support Jornal Bitcoin

Independent journalism, curated by AI, no clickbait. Keep the flame alive with any amount of BTC.

Wallet of Satoshi
jonata@walletofsatoshi.com

Daily Crypto Brief 📬

Subscribe to receive the curation of the most important Bitcoin and crypto news, summarized by AI. No spam.

Join more than 10,000 smart readers.

Related News

Iran's President Pleads for Peace as US Sanctions Threaten to Topple Government
Crypto Briefing

Iran's President Pleads for Peace as US Sanctions Threaten to Topple Government

Iran's President Masoud Pezeshkian is making a desperate plea for an end to regional conflicts as crippling US sanctions loom on the horizon. The escalating geopolitical tensions in the Middle East are threatening to destabilize Iran's political landscape, with analysts warning of potential consequences for the president's leadership tenure amid growing economic pressure.

The impending American sanctions, expected to be implemented in the coming weeks, pose an unprecedented challenge to Iran's economy and its nuclear program. The situation is exacerbating the humanitarian crisis in the country and increasing volatility in cryptocurrency markets, which many Iranians are using as a financial refuge. Pezeshkian's appeal may represent a last-ditch effort to prevent political and economic collapse, but the international response will ultimately determine the future of the regime.
Arizona Financial Firm to Pay Up to $5,000 Per Person in Data Breach Settlement
The Daily Hodl

Arizona Financial Firm to Pay Up to $5,000 Per Person in Data Breach Settlement

Arizona-based financial firm On Q Financial has agreed to a $1.25 million class action settlement following a February 2024 data breach that exposed client names and Social Security numbers. Affected individuals may receive up to $5,000 each as part of the settlement, marking a significant precedent in financial data breach cases. This case highlights the growing cybersecurity risks in the financial sector and the legal consequences for companies that fail to protect sensitive customer information. The settlement sets an important precedent for data breach victims, demonstrating that financial institutions can be held financially accountable for security failures.
CryptoPotato

MANTRA Freezes Blockchain After Cosmos EVM Incident as Token Hits New Low

MANTRA, a DeFi blockchain platform, has taken drastic action by freezing its mainnet in response to a critical incident on the Cosmos EVM. Validators have been explicitly instructed to keep their nodes offline until an official restart is announced, causing market panic and sending the MANTRA token to new all-time lows. This incident deals a significant blow to user confidence in the MANTRA network and the broader Cosmos ecosystem. Prolonged downtime could lead to financial losses for users and projects built on the platform, highlighting the inherent security challenges of interoperable blockchains.
CoinDesk

Coldcard releases firmware after $114M Bitcoin theft; claims AI helped catch more bugs

Coldcard, the Bitcoin hardware wallet manufacturer, has released new firmware following a sophisticated attack that resulted in $114 million being stolen from users. After a three-week thorough review, the team identified additional issues unrelated to the original flaw, utilizing artificial intelligence to detect hidden vulnerabilities that could compromise customer funds security. While the update brings significant security improvements, the company warns it does not make an already compromised wallet safe. This incident highlights the ongoing security challenges in the crypto ecosystem and how companies are leveraging advanced technologies like AI to strengthen their defenses.
Standard Chartered Backs Off $100K Bitcoin Price Call, Says It May Be 'Too Low'
CoinTelegraph★ Featured

Standard Chartered Backs Off $100K Bitcoin Price Call, Says It May Be 'Too Low'

Standard Chartered's head of digital asset research, Geoff Kendrick, has for the first time admitted his year-end Bitcoin price forecast of $100,000 may be 'too low,' suggesting the cryptocurrency could approach its all-time high of $126,000 before the end of 2023. The recent Bitcoin rally, driven by short liquidations and recovering ETF inflows, is creating an optimistic scenario for cryptocurrency investors as institutional confidence continues to grow.

Kendrick noted that low open interest in the Bitcoin market leaves room for more investors to return as prices rise, with the recovery potentially accelerating after October 6. This new perspective of a higher price target for Bitcoin reflects increasing institutional confidence in the cryptocurrency market and could spark a wave of optimism among traders and investors as the market prepares for what could be a historic year-end for the leading digital asset.
XRP Ledger Makes Major Cleanup: Legacy Code Removed, Current Rules Preserved
CriptoFácil

XRP Ledger Makes Major Cleanup: Legacy Code Removed, Current Rules Preserved

The XRP Ledger has implemented a significant update in version 3.3.0, removing five consolidated amendments while maintaining current ecosystem rules. This legacy code cleanup represents a strategic move to optimize the protocol and ensure greater transaction efficiency, strengthening XRP's position as a relevant digital asset in the cryptocurrency market. The decision to maintain current rules while six proposals remain under evaluation demonstrates a careful balance between innovation and stability. This update reflects the XRP community's ongoing commitment to transparent governance and responsible blockchain technology evolution, maintaining its appeal to institutions and investors in the global cryptocurrency landscape.
Jornal Bitcoin Logo