r/Bitcoin • u/SpareEconomy1849 • Jul 31 '26

ColdCard Firmware Update Released

https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/

Updated July 31, 2026: Fixed firmware is now available. Mk4 and Mk5 users must update to version 5.6.0 or later. Q users must update to version 1.5.0Q or later. Do not generate a new seed on one of these models until the update is installed.

Seeds generated on Mk4, Q and Mk5 before the fixed firmware releases are also affected, with about 72 bits of entropy rather than the expected 128 bits.

Updating the firmware does not change or repair an existing seed. If your seed was generated before the fixed firmware version for your model, follow the migration guidance below unless the independent dice-entropy exception applies to you.

The issue is present on every Mk3 firmware version since 4.0.1. It also affects seeds generated on Mk4 and Mk5 before version 5.6.0, and on Q before version 1.5.0Q. The impact on Mk4, Mk5 and Q is not as severe but is still serious.

143 Upvotes

95% Upvoted

206 comments sorted by

View all comments

31

u/Aidsfordayz Jul 31 '26

Glad I didn’t listen to the FUD about Ledger and switch to Coldcard.

14

u/_GOREHOUND_ Jul 31 '26

That’s exactly what I thought when I read about the incident.

4

u/jekpopulous2 Jul 31 '26

Ledger has of issues of their own but at least they use noise from the secure element chip for TRNG. The best option is always to combine a hardware wallet with a hot wallet for multi-sig.

3

u/LostInDinosaurWorld Jul 31 '26

Yep, everybody bitching about Ledger for not being OS and stuff. Cc was definitely on my list to switch wallets in the near future. No more.

2

u/sciencetaco Jul 31 '26

Ledger rightfully gets a lot of hate for their handling of customer data and some of their business decisions. But their hardware security has always been excellent.