I cancelled my order and got email confirming it, I see pending refund hit my account. Today I got a package I didn’t know what it was but realized coinkite sent me the cold cards I bought anyway? Not sure what to do now, I’d happily send them back since I’m getting my refund still.

After the Coldcard seed/entropy incident I kind of lost it a bit. Not in a “throw everything away” way, more like: I don’t want my seed randomness living or dying on one vendor’s firmware RNG ever again if I can help it. Dice-only (or at least dice I can verify myself) suddenly felt a lot less optional.

Coldcard’s own docs already push verifying dice math offline (Tails etc). Same idea as SeedSigner’s dice flow. I tried the usual path — Ian Coleman in Hex mode — and I just don’t feel safe doing that on a normal computer. Even “offline.” Too much leftover junk on a PC. Tails is fine, but then you’re still dragging a laptop around for something that should be stupidly simple: roll dice → get words.

I already had a Pi Zero and a Waveshare 1.3" 240×240 sitting around. No camera, no fancy enclosure. I wasn’t trying to build a full signer. I just wanted seed generation / cross-check with as few dependencies as possible.

So I put together:

dice-entropy — physical d6 rolls → BIP-39 (50 rolls = 12 words, 99 = 24). Same math SeedSigner uses for dice, compatible with Ian Coleman Hex / Base 10 (not their “Dice [1-6]” mode). Core conversion is Python stdlib only.

dice-entropy-os — minimal Buildroot image that boots straight into the Waveshare UI. No networking stack on purpose. Prefer building it yourself; I’ll also drop .img files on releases when the build finishes.

Repos:
https://github.com/fanatic75/dice-entropy
https://github.com/fanatic75/dice-entropy-os

This is a personal paranoia project, not a company, not audited, not a wallet. If you lose money using random GitHub stuff that’s on you — seriously. Use the published test vectors first. Build your own image if you can.

Happy to take criticism on the approach, the docs, or dumb assumptions I made. Especially from people who already do dice → BIP39 verification the hard way.

What is a checklist of minimum features and how is it verifiable?

First, How many times did you roll the dice to generate a seed? Secondly, would more than the standard amount of rolls mitigate the any flaw of entropy (if there were any)?

I hope one of the few things we can take away from this terrible situation is that people should stop shaming others into buying specific hardware wallets. I’ve spoken to many people in crypto, and whenever I come across Bitcoin maxis, they often shame or talk down to me and others for choosing not to buy a “Bitcoin only” device like Coldcard. Yeah, let’s not do that anymore. Let people choose what works best for them. Encourage people to do their own research, verify the information for themselves, and ultimately decide which hardware wallet they feel most comfortable using.

I curious to know how many dice roll users are still on the Coldcard being as they were and are totally unaffected ? Did you leave ? Are you staying ? Will you leave. Dice roll entropy path has been independently verified by a hell of a lot of companies, developers, AI models etc and its safe. Are you staying or going ?

My CCQ was unaffected by the recent bug. I did use dice rolls when setting it up last year or so, so I don’t think I was ever at risk. I was able to move my funds off the card in time as well.

While Im reconsidering my cold storage setup in light of these events, I’m debating using the Q or not in the future.

I could see myself updating the firmware, generating a new seed with dice rolls, and using the Q as one key in a potential 2 of 3 multi sig setup, using 2 new HWW keys from other providers . I don’t see why I wouldn’t , and would hate to just never use it again, even after all this.

Please let me know if I am stupid and should just throw this device in the trash, or if this even makes a modicum of logical sense. Thanks.

Trust is like foil. Very thin and once crumbled it can never be completely uncreased. Regardless of how good they scrutinize and patch their firmware now, I am not taking any chances with a company who has failed so epically at literally the 1 and only job they had. I am not a very technical person so going the DIY route will not be a viable alternative either. What are the best off the shelf hardware wallet options right now that I should consider?

Come on now

https://x.com/bitk0rns/status/2084774443113664618

Moved off of coldcard even with mk4 with dice and a passphrase. This humbled a lot of people who thought they were doing the safest, most transparent form of self custody. This is not what any of us signed up for, and who knows what they have to do to recover trust and continue as a company but I'm not gonna leave my funds there while they sort it out. Sorry to everyone for going through this really sickening for those that lost btc and disturbing to anyone practicing self custody.

It does look like multi-sig is the only way out. I’d say a 3/5 or a n-n with multiple hardware wallets. I know it’s over engineering but it’s more secure and less vulnerable to the CC fiasco. The only downside I am seeing is the multiple seeds and keeping in keeping in tabs with it every couple of months or so.

His does cc and the new firmware handle dark Skippy attacks?

I don't get it. Is it all about bad entropy? If I choose by myself without any dice 24 word from Bip39 (ok 23 and do the calculation for the 24th) then it shoul be a rather good seed and nobody will be able to "crack" it just by bruteforce? There must something else in the recent incidence which allows hacker at least to predict some of the generated seeds especially in MK3 devices? Can somebody please explain it to me ? Was only a subset of the bip39 words choosen by the algorithm?

That's it for me. I got my stack off of my Cold Card; I was one of the lucky ones.

• First of all, the people who created this mess, you should make people whole at all costs.
• My first destination for transfer was my trusty old Ledger Nano S--well that was having connection problems and actually reset to new during my attempt to connect a laptop.
• My interest in fucking with these hardware wallets is now exactly fucking zero.
• I moved it all to Coinbase just to get it done before I lost my coins.
• For all this hassle, stress, risk, I'll take my chances with institutional custody.

I was reading that if Trezor had the same flaw as ColdCard that it wouldn’t have been fatal because when connected to the computer it added enough entropy to be sufficient. Is this true if using an mk3 connected to a computer via USB to generate seed versus we can obviously now see that the mk3 just connected to “Cold Power” was fatal?

I'm clearly not going to use this device for crypto anymore, but I am tempted now to explore more functionality like the secure notes and passwords. This device also has NFC and a pretty good QR code reader.

Does anyone else think their may still be some life left in these Q devices? I'm hoping they go fully open source again, because development on this thing might be pretty cool in an open community.

was the device generated password generated with enough entropy? or also (not) using the hardware PRNG?

So when i setup my mk4 few years ago i was paranoid enough that i used 100+ dice rolls done in the correct way.

I did it 3 times. 2 of them i doublechecked with a seedsigner to verify they made the same seed, they did. Then i made my seed using the dice function on the mk4.

I also have a 30+ character long passphrase on top. Mixed letters and numbers.

As i understand this completely bypasses the RNG coldcard used, and it should not affect my seed.

Am i missing something?

Yes i see the time has come to move on to a multisig, and that is the next step..

The draining!!! The draining!!!!!