We made a short visual explainer to help people understand the Coldcard bug, and what it means for the security of affected wallets.
Bitcoin's entire security model depends on a user's ability to select astronomically large numbers from a truly random set.
If you imagine every possible Bitcoin private key as individual atoms, when a private key is generated properly, the pool of possibilities is so large that it's like an attacker is hunting for one specific atom hidden somewhere across 2 billion galaxies. No classical computer could ever search that many possibilities.
Unfortunately, affected Coldcard firmware drew its seeds from a much smaller, more predictable pool. If every possible Coldcard private key was an atom, the possible set of keys would only be about the size of a large virus. In comparison, a standard computer could work through that space in just a few hours.
Our video helps visualize what this difference looks like, we hope this is helpful for everyone to establish the importance of true entropy in key generation.
We are deeply sorry for anyone who lost funds to this bug. We know several people that were personally affected, including members of the BPI team. Losing funds after working hard protect your wealth is extremely difficult.
We are developing a set of policy reflections based on this vulnerability that we hope to publish as soon as possible.
COLDCARD Mk3 Security Advisory
If you generated a seed on a Mk3 after firmware 4.0.1, your funds may be at risk.
Mk4, Q and Mk5 are not affected based on our early analysis.
Read the advisory and migrate carefully:
https://t.co/3vgPHOjMS7
The business world has its own version of the front line. To win at the edge, organizations will need technical teams in the "trenches" with their customers, building trust and solving real problems. That is exactly what Microsoft is doing.
Seems like the #AI industry is moving from trial to execution, and that is where Forward Deployed Engineers come into play.
@Microsoft recently announced a $2.5 billion investment in what they are calling the Microsoft Frontier Company to help support that shift.
That model matters even more now with AI Not every organization has the technical depth, capacity, or expertise to operationalize AI on its own. Buying the software is only one part of the equation. The harder part is turning it into measurable business outcomes.
@21e15MicroSeed Good concept. I would just be worried about edge scenarios - like a house fire where the small letters could become unreadable due to warping from extreme heat.
The official @TeamYouTube@YouTube@YouTubeCreators explanation for the removal of 9 years of in depth tutorial content that has been consumed by 16 million people.
@Ledger support #scam going around.
It will look like a software support calendar invite in your mail - STAY VIGILANT
“Confirmed: Ledger has added you to Software on Wednesday, June 11, 2025”
🍕GIVEAWAY #2🍕
We’re celebrating #BitcoinPizzaDay by giving away a COLDCARD Mk4 along with a custom pizza slice case from CryptoCloaks 🍕
Here’s how to enter:
- retweet and follow @COLDCARDwallet and @CryptoCloaks
- drop a comment: What’s your least favorite kind of pizza?