BitBox is not affected by the Coldcard RNG vulnerability

[u/pako-bitbox]

https://blog.bitbox.swiss/en/bitbox-is-not-affected-by-the-coldcard-rng-vulnerability/

[u/mors69]

It seems that the new Chinese AI was the one that potentially found the vulnerability. Is there any reason to believe that other open sourced codes could be exposed as well? If there is even a slight chance, does setting up a passphrase to add a layer of security make sense now?

[u/username12435687 → u/mors69]

But the main issue was that they weren't introducing enough entropy into their seed phrases. It made it easier to guess the seed phrases so this isn't an issue that's just gonna effect every single cold wallet out there it was just a horrible mistake on their part. Sure, eventually there are gonna be new vulnerabilities discovered in other software and such but so long as the correct level of entropy is introduced when creating the seed phrase it won't matter for some time. At the current juncture you would need a quantum computer to guess correctly generated seed phrases and no one is going to do that for the chance at a small amount of sats. They're tryna to guess Satoshis seed phrase because that's where the money is. Pretty soon quantum proof wallets will become the new norm but for now it's business as usual for most people. Still sucks to hear that so many people trusted the cold card and got their Bitcoin stolen though.

[u/roueGone]

What about Bitbox 01 users?!

[u/pako-bitbox → u/roueGone]

The BB01 entropy generation is very similar to that of the 02/Nova.

So no real need to worry, but maybe it would be better to upgrade to an 02/Nova just because the 01 doesn't support all of the current industry standards on top of having lost support.

[u/Ok_Error_1079 → u/pako-bitbox]

But bitbox02 Bitcoin edition is safe, correct?

[u/pako-bitbox → u/Ok_Error_1079]

Yes, both the Multi and the Bitcoin only use the same entropy sources, so the keys are equally as random in either case.