Baki Aksakal

Visioneer @COLDCARDwallet Önce vatan 🇹🇷 | Ecosystem and Community Lead @Coinkite

[Baki Aksakal @Bakiakskl]

⚠️ Please act quickly:

Follow the advisory for your device model, update your device, create a new seed, and securely transfer your funds.

Help us share especially with those who may not be frequently online and might miss this update.

#ColdCard #COLDCARDwallet #BTC

[COLDCARD @COLDCARDwallet]

🚨URGENT COLDCARD SECURITY UPDATE

Read carefully before acting.

👉Mk3 seed generated on 4.0.1+ without ≥50 private, independent dice rolls: begin a careful migration now.

👉Mk4/Mk5 <5.6.0 or Q <1.5.0Q: update first, generate a new seed, then migrate.

https://t.co/HshUxevCl3

[DNA Protocol @DNAOnChain]

$XDNA Presale is Open

$XDNA is the native token powering DNA Protocol, infrastructure that secures genomic identity using zero-knowledge proofs anchored on the #XRPL.

Early participants support the foundation of the ZK-powered genomic identity economy.

👉 Join the presale: https://t.co/pHyWTi9ITa

[Ozak AI @OzakAGI]

Most traders are still staring at charts trying to guess what happens next.

The smart ones just ask an AI.

Ozak AI, a predictive intelligence platform that turns raw market noise into trade-ready decisions, has its flagship product ready 🔥

🧵👇

[Baki Aksakal @Bakiakskl]

The TGE is cooking up nicely behind the scenes - think of it as a fine recipe that needs right timing to serve the perfect dish.

The team is committed to launching at the optimal moment to ensure the best experience and value for everyone involved. It’ll be worth the wait.

[Martijn Van der Meijs @MartijnvdMeijs]

@OzakAGI When TGE? What is the reason you never answered this kind of questions?

[Baki Aksakal @Bakiakskl]

@jojogg5544 @COLDCARDwallet Please block and report with immediate effect, they are easy to identify. We would never ask you for such information @jojogg5544

[Baki Aksakal @Bakiakskl]

@maviaboom @BTC_Hyper2 When was your purchase made and do you still have the transaction hash ? @maviaboom

[Baki Aksakal @Bakiakskl]

@SLEYMANKELfoqr @BTC_Hyper2 That's not true, I think you're the one not getting it right. I bought with Solana and I could still stake my purchased tokens. Let me know if you need me to walk you through the process.

[Baki Aksakal @Bakiakskl]

@jackpotterCOM Discord verification is not working, Do something to fix it up.

[Baki Aksakal @Bakiakskl]

@jackpotterCOM Discord verification is not working, Do something to fix it up.

[COLDCARD @COLDCARDwallet]

If you would like us to apply our existing retention policies to your data, we will exempt them from this protocol. Please confirm that you do not want us to preserve your data by contacting support @ coinkite . com

[COLDCARD @COLDCARDwallet]

Extremely important correction.

@jackmallers there wasn’t a weak entropy fallback. I think it’s important to be precise about what actually happened.

The weak PRNG (Yasmarang) wasn’t Coinkite’s fallback—it was MicroPython’s built-in general-purpose RNG, introduced upstream in May 2018. It didn’t become part of Coldcard’s seed generation until the libNgU migration in March 2021.

Most language runtimes include a non-cryptographic RNG like this for general purposes such as shuffling, timing jitter, or other non-security-related randomness. By itself, that’s not unusual.

Coinkite’s design intent was actually the opposite of having a software fallback: seed generation was supposed to rely exclusively on the hardware TRNG and never use the software RNG. Setting MICROPY_HW_ENABLE_RNG=0 was intended to disable that software path.

The issue is that this setting didn’t have the intended effect, and the symbol instead resolved to the runtime’s default implementation. So what people are describing as a “fallback” wasn’t an intentional design decision or a shortcut in the seed-generation logic—it was inherited behavior from the underlying platform that became active because of a link-time error.

[COLDCARD @COLDCARDwallet]

You can follow COLDCARD's next firmware updates on GitHub, we are focusing the next release and customer key migration.

Follow the warning below.

[COLDCARD @COLDCARDwallet]

Please treat this as urgent. Migrate your funds. Follow the advisory for your model, upgrade your device, generate a new seed, and carefully move your funds.

Help spread the word, especially to people who are less online and may not see this update.

The threat is still ongoing.

[COLDCARD @COLDCARDwallet]

https://t.co/C6FZElsvYv

[COLDCARD @COLDCARDwallet]

🚨 NOTICE: Claims that current firmware permanently bricks COLDCARD devices are incorrect.

If this TRNG fault occurs, power-cycle it: fully remove all power, then restart.

The state is volatile, nothing is written to flash, and it fails closed. Fix:
https://t.co/hV7nrBMn0U

[COLDCARD @COLDCARDwallet]

Please treat this as urgent. Migrate your funds. Follow the advisory for your model, upgrade your device, generate a new seed, and carefully move your funds.

Help spread the word, especially to people who are less online and may not see this update.

The threat is still ongoing.

[Baki Aksakal @Bakiakskl]

@JohnSteelz @COLDCARDwallet We know this is solely our fault and we take full responsibility and blame. The recovery plan and reimbursement process will be communicated soon. Stay in touch.

[Baki Aksakal @Bakiakskl]

@DanishVagabond @COLDCARDwallet Memo has already been sent to affected users, the reimbursement plan and process will be announced soon as well. We believe you're not affected.

[COLDCARD @COLDCARDwallet]

Why destroy affected inventory?

COLDCARD has a series of high-security system locks. Once programmed, it cannot be re-upgraded until the user initializes it.

We cannot ship units with affected firmware and risk users missing the upgrade.

The safest action was to destroy all the affected inventory and ship only those with the new fixed firmware.

[COLDCARD @COLDCARDwallet]

https://t.co/BmZF7BjKQr

[Baki Aksakal @Bakiakskl]

@LuciaMillezyj @COLDCARDwallet What Is it about the back up? Doesn't seem to understand your inquiry