CoinTelegraph

Coldcard's 5-year bug exposes critical hardware wallet testing gap: Kraken security chief

August 3, 202601:09 AM
Coldcard's 5-year bug exposes critical hardware wallet testing gap: Kraken security chief

A five-year vulnerability in Coldcard has exposed a critical flaw in hardware wallet auditing processes, according to Kraken's security chief Nick Percoco. The bug escaped detection because auditors only verified the existence of the random number generator, not that it was being used in the seed generation process, representing a significant risk to cryptocurrency users.

Percoco has labeled the incident a "wake-up call" for hardware wallet manufacturers, calling for independent testing to verify that the approved source of randomness is actually being used by production firmware. Consumers are asked to trust a manufacturer's implementation of the single most critical function in the system with no independent verification that the approved entropy path is the one actually executing, highlighting the urgent need for greater transparency and security in the cryptocurrency ecosystem.

This is a summarized and adapted version by Artificial Intelligence. To read the complete original story, visit the official source.

Read Full Article at CoinTelegraph
QR Code Lightning

Support Jornal Bitcoin

Independent journalism, curated by AI, no clickbait. Keep the flame alive with any amount of BTC.

Wallet of Satoshi
jonata@walletofsatoshi.com

Daily Crypto Brief 📬

Subscribe to receive the curation of the most important Bitcoin and crypto news, summarized by AI. No spam.

Join more than 10,000 smart readers.

Related News

Tesla's $1T Musk pay package hinges on sixfold stock growth to $8.5T market cap
Crypto Briefing★ Featured

Tesla's $1T Musk pay package hinges on sixfold stock growth to $8.5T market cap

Tesla's board has approved a groundbreaking $1 trillion compensation package for Elon Musk, contingent on extraordinary stock growth. To unlock the full payout, Tesla's market capitalization must reach an unprecedented $8.5 trillion, representing a sixfold increase from current levels. This deal stands as one of the largest compensation packages in corporate history, directly linking Musk's fortune to Tesla's astronomical valuation and reinforcing his influence in both traditional and crypto markets.

The move solidifies Musk's control over Tesla and potentially accelerates his innovation vision, including greater involvement with digital assets and cryptocurrencies. The required growth would place Tesla's valuation above all current companies except perhaps a few tech giants. Investors and analysts speculate how this condition will impact Tesla's strategic direction and Musk's positioning within the crypto market, with the compensation package serving as a catalyst for significant changes in the digital ecosystem.
Luno Freezes Crypto Transfers for Users, With August Deadline Before Fees Kick In
CryptoSlate

Luno Freezes Crypto Transfers for Users, With August Deadline Before Fees Kick In

Cryptocurrency exchange Luno has frozen crypto transfers for certain users, establishing a late August deadline for cash-outs before monthly fees are imposed. Effective June 29, affected customers can no longer transfer their digital assets, being forced to sell cryptocurrencies and withdraw funds to bank accounts before complete account closure on September 1. This decision by Luno marks a significant development in the global cryptocurrency exchange landscape, directly impacting investors who rely on the platform. With the deadline approaching, users face pressure to liquidate their positions, potentially causing market volatility in affected regions. The move also raises questions about exchange centralization and the importance of portfolio diversification for cryptocurrency investors.
Trump Media's Bitcoin stash now likely loan collateral after $165M transfer
CoinDesk★ Featured

Trump Media's Bitcoin stash now likely loan collateral after $165M transfer

Trump Media's massive $165 million Bitcoin transfer raises serious questions about the financial health of the Truth Social parent company. With cryptocurrency holdings now approximately equal to the value previously pledged as loan collateral, the next 10-Q filing has become the most anticipated document in the crypto market.

Financial and crypto analysts are closely watching to determine if recent transfers to Crypto.com represent merely a custody change or actual sales of digital assets. This move could have significant implications for the future of Truth Social and investor perception regarding the company's digital asset strategy under former President Donald Trump.
Galaxy Digital vs Duel Casino: Legal Battle Over 230 ETH from Coldcard Exploit
Bitcoin.com

Galaxy Digital vs Duel Casino: Legal Battle Over 230 ETH from Coldcard Exploit

Alex Thorn, Head of Firmwide Research at Galaxy Digital, has publicly criticized Duel Casino for refusing to block nearly 230 ETH allegedly stolen from a victim of the Coldcard vulnerability. The escalating dispute between the crypto exchange and online casino highlights growing tensions in the digital asset ecosystem over security protocols and ethical responsibilities. Duel Casino maintains its position of freezing funds only with concrete evidence linking them to the hack, creating a complex legal standoff.

Duel Casino's stance raises critical questions about user protection and platform accountability in the rapidly evolving crypto landscape. As the Coldcard hack continues to spread across multiple exchanges and gaming platforms, the incident is forcing the entire industry to reevaluate security measures and compliance standards. This dispute underscores the challenges faced by crypto businesses in balancing security obligations with legal due process in an increasingly regulated environment.
NATO Takes Command of Ukraine Security as US Military Role in Europe Shrinks
Crypto Briefing

NATO Takes Command of Ukraine Security as US Military Role in Europe Shrinks

NATO is set to take command of the Ukraine Security Assistance Group, representing a major strategic shift as the United States scales back its military presence in Europe. This realignment of security operations in Ukraine could reshape the regional power balance and create new opportunities for blockchain technology in military and humanitarian operations.

The leadership transition occurs at a critical moment for European security, with profound implications for American influence and geopolitical dynamics. Security and cryptocurrency experts are closely watching how this shift might accelerate the adoption of crypto solutions for defense funding and humanitarian aid, potentially establishing a new paradigm for the technology in conflict zones.
Michael Saylor's Strategy Now Tracks Bitcoin's 200-Week Moving Average - Major Signal for Crypto Markets
CoinDesk

Michael Saylor's Strategy Now Tracks Bitcoin's 200-Week Moving Average - Major Signal for Crypto Markets

Michael Saylor's Strategy is now closely monitoring Bitcoin's 200-week moving average, a critical long-term support level that the cryptocurrency has historically respected. This technical indicator, currently around $21,000, has served as a key battleground for Bitcoin price action throughout previous market cycles, making it a focal point for institutional and retail investors alike. The adoption of this metric by one of crypto's most prominent institutional investors underscores the growing importance of technical analysis in navigating volatile markets. As Bitcoin approaches this significant level, market participants are watching closely for potential reactions, with many analysts suggesting that how the cryptocurrency handles this support zone could determine the next major directional move for the entire digital asset ecosystem.
Jornal Bitcoin Logo