Last Notes
That's what Staunton did.... They're still up. They aren't "on" and don't show up on the map. Idk. I think there's more going on there ,🤔
I do not know what your AI hallucinated (it really reads like an AI post) but this is not true.
Your address cannot be “identified” as low entropy and seen as such, until they find the seed phrase for it. You cannot target a given wallet.
All you can do is a sweep across all possible wallets, so you need to move ASAP
Think of it this way: a single dice roll produces a number from 1-6. The information content of this is log2(6) = 2.585.
That is, each roll produces about two and a half bits worth of entropy.
A 12-word seed phrase encodes 128 bits of entropy. 128 / 2.585 = 49.516. So, yes, to generate a 12-word seed phrase, you need to combine the entropy from 50+ independent dice rolls.
The same logic holds for a 24-word seed phrase which encodes 256 bits of entropy. For that you need the combined entropy of 100+ dice rolls.
BUT the key factor here that most people miss is HOW those rolls are combined. Somehow, your sequence of dice rolls (5-4-5-2-1-…-6-6-4) has to be converted into words (bacon-celery-zoo-…).
If that mechanism is the hardware wallet, then you’re STILL TRUSTING the device, albeit a different code path. How do you know that those rolls produce THAT seed?
So yes, dice rolls are a big step up from just trusting the device’s random number generator. But you’re still vulnerable to other not-yet-discovered bugs in the hardware.
To immunize yourself from ANY hardware bugs, you have to roll your own seed material OFFLINE.
For sure. Criminals who thought coldcard was the gold standard. They’re gonna try to find some “justice”
I think it's important to be public about that too. A lot of folks don't understand, and think that the flock battle here has already won. That was just a battle not the war 😞
Wallet of Satoshi maybe used coldcard? 😅🫠
BuT its ReProDuCaBle its ThE sAME ThING
https://media1.tenor.com/m/FlNf1oY95AYAAAAC/detective.gif
Influencoors will have egg on their face, that people will forget about in time. a company will go out of busines, but will just stand it back up as another name under the radar.
But people will never get their sats back.
Don't trust, verify really is a moniker people repeat without practicing.
Once you've been around for a few cycles you start to see the BS
No wonder OGs peaced out. The only vocal ones are here to sell you shit
The worst part about all this coldcard shit is that @nprofile…32sk may have been able to prevent this if he kept his product FOSS. It may have gotten caught by someone and reported. Greed led to an inevitable demise.
Hope everyone is okay.
GM☀️
I remember 100 rolls was recommended to me
https://npub1lrnvvs6z78s9yjqxxr38uyqkmn34lsaxznnqgd877j4z2qej3j5s09qnw5.blossom.band/fe8bae65d29de3a4d1340e8699cc4470d448949416899def5681ef3427cb6dc4.png
Not a particular one, mostly gathering info from an ungovernable misfits video from 2023 time. Talks about how you need way more rolls than some people think, iirc it's like at least 50+ for 12 word and 100+ for 24 word. Might have that backwards. Don't quote me.
And when you flip coins, you are creating the bits yourself 0 or 1 so you really are random. People quote flaws in dice, they recommend getting casino dice, seems for the 'provably' random part. If I find any de facto culmination I'll be sure to post, but right now mostly a hodgepodge of various forum posts and videos from throughout the years.
The last thing we want is someone rolling a seed with 15 dice rolls thinking they are good ya know.
I asked Fable5 to audit seedsigner's entropy paths. I don't use seedsigner *yet* but I probably will try it out at some point. This did produce one good recommendation in hardening the code to prevent future 'mistakes' in the UI entropy gate, but, other than that, no flaws found. Seems like a decent way to accompany dice rolling or etc.
Fable5:
I'll audit SeedSigner's entropy generation and key derivation paths. Let me start by mapping out where entropy enters the system — dice rolls, coin flips, camera-based entropy, and any use of RNGs — then closely review each path.
The audit is complete. Here's my full report.
Verdict
I found no flaws that could lead to a low-entropy key in normal use. SeedSigner's design deliberately avoids trusting any onboard RNG — every seed-generation path is driven by external entropy (camera image, dice, coin flips), hashed through SHA-256, and fed to a well-reviewed BIP-39 implementation (embit 0.8.0, pinned in requirements.txt). The things I'd normally hunt for in this kind of audit — random module use in key paths, reused/aliased entropy buffers, early-exit paths that accept short input, silent truncation — all check out clean.
What I verified, path by path
Camera image entropy (tools_views.py:120-198): The final entropy is SHA256(chain) where the chain folds in the CPU serial number, time.time(), up to 50 live preview frames, and a final full-resolution photo (at ≥2× screen dimensions). Two things I specifically confirmed:
- Each preview frame is an independent copy — camera.read_video_stream(as_image=True) does frame.astype('uint8') + Image.fromarray(...) (camera.py:52), so the 50 frames aren't 50 references to one reused buffer.
- The weak inputs (serial number, wall time) are only ever added to the hash chain; hashing extra low-entropy data can't reduce the entropy contributed by the image itself.
Dice rolls (mnemonic_generation.py:64-81): 50 rolls for 12 words (~129 bits, ≥128 ✓) or 99 rolls for 24 words (~256 bits ✓), hashed as an ASCII string via SHA-256 — the iancoleman.io "Base 10" approach. The entry keyboard only offers digits 1–6, backspace is handled correctly, and the screen returns only when exactly return_after_n_chars characters are entered (screen.py:1289). I checked the one early-return path in KeyboardScreen (the save button at screen.py:1237) — it's gated behind show_save_button, which the dice and coin-flip screens never enable, so you cannot submit fewer rolls than required.
Coin flips: Same structure, exactly 128/256 flips enforced, charset limited to "0"/"1". Sound.
Final-word calculation: Contributes only 7 bits (12-word) or 3 bits (24-word) plus checksum — but that's the correct math for this feature, and the UI states it explicitly. The "finalize with zeros" option is a deliberate, labeled choice.
Key derivation (models/seed.py): Straight bip39.mnemonic_to_seed (PBKDF2-HMAC-SHA512, standard) with NFKD normalization. The Electrum variant uses the spec's 2048 rounds. No custom crypto.
PRNG usage: The only uses of Python's non-cryptographic random are the screensaver animation, the backup-quiz decoy words (seed_views.py:1284-1289 — doesn't touch key material; the random.seed() call there is screenshot-generator-only), and the CLI tool's demo mode, which prints "This is a demo seed. Do not use it to store funds!!!". No os.urandom or PRNG anywhere in a key-generation path.
Test coverage: tests/test_mnemonic_generation.py pins fixed vectors cross-checked against iancoleman.io and Coldcard's published dice-roll verification sample, so any regression in the entropy→mnemonic math would fail CI.
Minor findings (none are exploitable in normal use)
1. No length validation in generate_mnemonic_from_dice / generate_mnemonic_from_coin_flips (mnemonic_generation.py:64, 85). Any input that isn't exactly 50 chars silently produces a 24-word mnemonic — e.g. 10 dice rolls would yield a 24-word seed with only ~26 bits of entropy. Today the UI makes this unreachable, but it's a single-layer defense; a future caller or a UI refactor could regress it silently. An assert len(...) in [50, 99] (with an escape hatch for the Coldcard 6-roll verification vector, which currently relies on this leniency) would be cheap defense-in-depth.
2. No degenerate-image check on camera entropy. If the sensor ever returned truly constant frames (fully dead sensor still returning data), the remaining entropy would be roughly just time.time() — guessable. In practice a disconnected camera raises CameraConnectionError, and even a lens-capped sensor produces thermal noise, so this is theoretical — but a cheap "image variance too low, reshoot" warning would close it.
3. Cosmetic off-by-one: bip39.WORDLIST[int(random.random() * 2047)] at seed_views.py:1284-1286 can never pick the last word ("zoo") as a quiz decoy. Should be random.randrange(2048). No security impact.
Practical guidance
The strongest guarantee this codebase offers is verifiability: for dice or coin-flip generation you can independently reproduce the mnemonic from your recorded rolls via tools/mnemonic.py or iancoleman.io/bip39 ("Base 10"/"Binary" mode), which removes the need to trust the device's code at all. If maximum assurance matters to you, dice generation with external verification is the path I'd use; camera entropy is also sound but is inherently harder to audit after the fact.
That is not how multisig recovery works, and a single UTXO spend can be used to recover the entire multisig
Credibility of Coinkite now is nonexistent
I wouldn't fault anyone for moving some to Lightning wallets, Strike (etc) or whatever is necessary to not have their entire stack in a CC setup, regardless of whether dice or passphrases were used.
#nevent1q…22yx
You think it was done on purpose? What would be the goal?
If I was using coldcard I wouldn't have gone to sleep last night without migrating funds.
Highly recommend moving funds if on coldcard. Even if rolled dice and passphrase, you are a higher hanging fruit with those, but not as high as previously thought.
Do you have a link to share
Dringende Info für die ColdCard-Nutzer unter euch: Alle Seeds die mit den Firmwares ab Anfang 2021 generiert wurden, nutzen nicht genügend Entropie und können recht einfach geknackt werden. Sofern ihr eine Passphrase nutzt ist das kurzfristig gut, aber auch hier ist dringend das Migrieren auf einen neuen Seed (im Idealfall mit eigener Entropie per Würfeln) geraten.
So wie es aussieht, sind Seeds die mit vorherigen Versionen der ColdCard generiert wurden sicher. Dennoch solltet ihr euch generell auch da Gedanken bzgl. Nutzung von Passphrases oder MultiSig Gedanken machen — ich gehe davon aus, dass das nicht der letzte solcher Fälle bleiben wird.
https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/
Also check out how rice rolls have led to bad seeds in past. Learning that coin flips are superior, you need more but so what.
GM
NVK must be shitting his pants. Imagine people who lost years of stacking
GM
I’m glad I never trusted device generated keys
GM
That seems to be the consensus yes
Anyone who has worked on Nostr projects knows that open-source only leads to higher quality and deep review if multiple teams are auditing the code. Usually because they use the code or were hired to inspect it.
Fucking terrible. Remember 6-8 years ago, Coinkite was supposed to be the gold standard. What a load of crap
Shoulders & Arms
AMRAP: Overhead Press x6, Bent Over Row x6, High Pull x6
AMRAP: Lawn Mower Row x8, Overhead Press x8
AMRAP: Zottman Curl x6, Tricep Kickback x8
AMRAP: Lateral Raise x5, Bicep Curl x5
30min intervals (indoor cycling)
#proofofwatts #365days
https://node.blossom.band/7fb17812ae97b7dedfd6b1ea9f1a56eda9eb7e23710c384736118ed91d5256ee.jpg
https://node.blossom.band/a9033e9d0007d916b43c5bc209ca9248134bb0a1ec2eb200255fc9a29b0b7807.jpg
I guess I’ll never use that credit I have at Coinkite 😬
GM good people 🎲
https://node.blossom.band/9f76304dc86143e575812d8e5da1fcf60a8bb94651366c01e216c609e53adcc4.jpg
The company might hold reduced blame, if they conducted the quality assurance that is industry standard practice. (Which they probably didn't.)
Might also affect their insurance coverage.
Good morning. If you are using a Coldcard-generated seed, please move your funds immediately.
Here is an explanation of what went down without the influencer slop:
#nevent1q…q9qj
The sun farts stole the cold card bitties!!!!
https://blossom.primal.net/d6e460e07b36e7d6fe5a71de5821c8b4741d67bb9c4edd30b9e4f35b9378065c.gif
Hot like wasabi, everyone in their feelings
if you use a coldcard, move funds asap
dont hesistate, just do it
in the short term i see two options for people that dont already have other offline hardware, hot wallet or custodial, for hot the gold standard is sparrow wallet on desktop (sparrowwallet.com), add a strong passphrase (25th word), for custodial i guess use whatever you have an account with (obvious privacy and trust implications)
A hot wallet is safer than coldcard
#coinkite should go out of business.
Its nvk fault for being greedy with the code.
Nvk is a snake.
Yup.
Anyone who buys one after this is just asking to get boned.
you should talk to semisol about secure elements, that's one of his things
https://npub1gke42gwrz2ja5np9tpcr449785hx6zxgzf2329x8584h4d06puzqg33xp3.blossom.band/b95234bcf6e40339c65d98b5946d58190f077f659478f2460c014376f9ccec8d.jpg
Well, now it seems we may finally have a catalyst for this cycle’s true bottom.
Yesss 😂 these shorts are great
An open source project does not mean everyone owns it. You still have an owner, they may label themselves as mere maintainers, that's philosophy, not part of the license.
I think I might be entering the job market soon 😑
https://www.semafor.com/article/07/29/2026/with-spacex-circling-verizon-figures-out-succession
Hey @nprofile…uc0e can I get one too 😺
