flash on Nostr: ⚡️🚨 FYI - DICE ROLLS DO NOT PROTECT EVERY COLDCARD FEATURE Even if your seed ...
⚡️🚨 FYI - DICE ROLLS DO NOT PROTECT EVERY COLDCARD FEATURE
Even if your seed phrase is safe because you generated it with dice rolls or imported an existing seed, several Coldcard features may still be vulnerable due to the Yasmarang PRNG flaw.
Affected features include:
• Paper wallets
• Device cloning
• USB sessions
• Secret Teleport
• Co-signing keys
• Password generator
• HSM mode
The seed itself remains secure if it was imported or generated with sufficient dice rolls, but using these features can still expose secrets generated by the flawed random number generator.
Published at
2026-08-01 20:14:47 UTCEvent JSON
{
"id": "5734102fecb4ab1725f3113aa96fcc95f753e92fb2815ffb0ea27e7707a99fe9",
"pubkey": "4d7842051782e0d3feb034d150adc2b6bae4ee3b49786793bffa468b6f5b96b3",
"created_at": 1785615287,
"kind": 1,
"tags": [
[
"imeta",
"url https://blossom.primal.net/73add1d10836c63edf265dac7fa9f22ca7c70062aaff36da17bcc86d70769fa4.jpg",
"m jpeg",
"dim 1920.0x1627.0"
],
[
"client",
"Primal iOS"
]
],
"content": "⚡️🚨 FYI - DICE ROLLS DO NOT PROTECT EVERY COLDCARD FEATURE\n\nEven if your seed phrase is safe because you generated it with dice rolls or imported an existing seed, several Coldcard features may still be vulnerable due to the Yasmarang PRNG flaw.\n\nAffected features include:\n• Paper wallets\n• Device cloning\n• USB sessions\n• Secret Teleport\n• Co-signing keys\n• Password generator\n• HSM mode\n\nThe seed itself remains secure if it was imported or generated with sufficient dice rolls, but using these features can still expose secrets generated by the flawed random number generator.\nhttps://blossom.primal.net/73add1d10836c63edf265dac7fa9f22ca7c70062aaff36da17bcc86d70769fa4.jpg",
"sig": "f8213955c27ca4f6b0e9ea61ea686bd0afaca34a39b53e99e23bf5819478f5db5844dca4a709269b176e36987887f8090aaacc0267b072a642f6884ab647b6cb"
}
