🚨 New COLDCARD firmware is available: 5.6.1 for Mk4/Mk5 and 1.5.1Q for Q.
This release follows three weeks of sustained review since our July 31 hotfix. We continue to acknowledge the customers who suffered severe financial losses from the seed-generation attack.
Every newly generated seed now requires one source of user entropy: at least 65 key presses with unpredictable timing, 50 physical dice rolls, or 128 physical coin flips. This input is combined with fresh entropy from the STM32 TRNG, SE1, and SE2.
The release also adds staged-PSBT verification immediately before signing, stronger USB and firmware-update boundaries, improved Delta Mode isolation, active-wallet backup fixes, stronger RNG initialization and fault checks, safer SIGHASH defaults, and many additional security and correctness improvements.
Important: Updating does not repair an existing seed generated on affected firmware. If the advisory applies to your seed, update your device, generate and verify a new seed, then move your funds.
We strongly recommend that all Mk4, Mk5, and Q users update and verify the signed firmware download.
Thank you to every researcher who reported issues, reproduced edge cases, reviewed fixes, and helped make this release stronger.
https://t.co/tFAiHhEWAy
@MarketAnarchy21 The problem with the existing bitcoin blockchain is that it has non-monetary data as well as miner centralisation. While your monetary node removes the non-monetary data, it cannot solve the centralisation issue. We need a PoW algorithm change
Stripped every spam carrier from 194,863 Bitcoin blocks — inscriptions, oversized OP_RETURN, scriptSig data.
Then rebuilt every merkle root and checked it against the header.
194,863 verified. 0 failed. 33.5 GB removed. The chain still verifies.
https://t.co/8kAAa0g3nz
@Saschato1992@saylor@saifedean It's a good choice until governments change the rules, like Nixon did in 1971 when he ended the dollar's convertibility to gold.
Stop playing games man
@piyushbodaa We need to separate the money from the state. Bitcoin is the way. However please note that in the recent BIP-110 failure, it is clear that even bitcoin has been captured by miners and big bitcoin companies so bitcoin with new PoW is coming up on 1st Sep
@Saschato1992@saylor@saifedean No I don't. I used to believe in Bitcoin. But this @saylor guy conspired with miners and big bitcoin companies and captured it so yeah now plebs are dumping it and moving to a new truly decentralised chain
@VizagPanda This just shows that people still don't understand that fire is a chemical reaction / combustion and not a abra ka dabra magic portal through which the offerings reach the gods.
Fuckin cancers!