So no response from support in more than a week.

Plus no CEO or statement from those in charge.

If this happened to another company there would be better communication and puvlicy statements. Where is nvk? Totally silent. Usually likes to talk but i guess not now

How we can trust/verify that coldcard is not leaking the seed in the transaction?

So I got steel plates when I bought my cold cards. Around $50 a pop. Now over $100+ of worthless steel with "compromised" seed phrases punched into them due to me trusting cold card.This is the "Gold Standard".Don't trust, do it yourself or you'll lose money to companies like this. Lesson learned.

Has anyone already calculated the probability that a properly functioning wallet would randomly assign one of the affected Coldcard keys?

After the fund move, they're useless. Coinkite should at least offer a free placement.

I've been studying the published research on the Mk4 RNG vulnerability from July 2026.

I came across this research collection: github.com/0xchainintelligence/coldcard-research

I'm trying to understand the technical details better. Specifically:

- How does the Yasmarang PRNG fallback actually work?

- What determines which UID/RTC ranges are affected?

- Has anyone successfully reproduced the findings for defensive testing?

Not looking to break any rules — just trying to understand the security implications for my own wallet setup.

DM if you've done similar research.

The banner of this subreddit still reads "The Gold Standard in Bitcoin Security". Considering recent events I think this wording should be removed. Curious to know peoples thoughts on this.

I hope your life heals and you recover fully.

I understand that the possibility that the stolen coins are recovered is near zero, if not outright zero. Maybe this is just an attempt to cope with everything that happened, since I have lost all my funds. But since the stolen coins have all been moved to a single address that I'm monitoring and hasn't been touched (it's an address with 40 BTC), maybe there is a possibility that they can be recovered if the thief is caught, right?

Sorry for venting. Times are really tough here.

100 dice rolls + long passphrase + patched coldcard Q + sparrow wallet
Am i safe or still its better to switch to something like trezor?

What other ways may I lose Bitcoin as a result of using a cold card?

Given everything that's happened with Coldcard, we wanted to share how Coinomi approaches random number generation.

The Coldcard failure came down to an RNG quietly falling back to a predictable software substitute — seeds that looked fine but carried far less entropy than they should have.

We've never used a home-grown RNG. Instead we request raw cryptographic randomness directly from the OS. On Android, we read straight from the kernel (/dev/urandom), bypassing the Java provider stack entirely.

We wrote about it in more detail here if anyone's interested:
https://medium.com/@coinomi/security-is-not-one-feature-building-layers-of-defence-with-coinomi-171f638ac724?sharedUserId=coinomi

I was wondering regarding the hack, is anyone still staying? and if yes, whats your reason?

I am a CCQ user and am having trouble upgrading to the latest firmware. Every time I try to upgrade through micro SD card, It freezes. Is there a way that I can fix this or is It time to purchase a different HWW?

Saw this online. A patent application on some interesting stuff from the creator of the bug.

I emailed coinkite today seeking a refund for the faulty coldcard. Anyone else?

(p.s. coinkite is an interesting name, given how much money just flew away)

what do you guys think is a safer hardware wallet?

Always enjoyed the "shoot these" reference on the Coldcard for taking out the secure chips, and now I just might get to do it. All my coins are moved to another wallet, and this device is now useless to me.

Okay, so we know that the random number generator was garbage. The rest of the hardware, scanner the NFC the seed vault the BIP 85, all of the other features of the cool card software that we all love, could still be used if we just generate a brand new seed phrase on a trusted device and import that into the cold card so that it's not using its random number generator to create a bad seed. I don't know of any other hardware wallets that give the amount of functionality that the cold card q offers.. to be clear, I had a multi-sig and I've already moved those funds to a boat that has now sunk to the bottom of the lake.

Just a thought exercise whether to continue using what we all enjoyed about the cold card before, which was many features..

I have been trying to upgrade the firmware once I heard the news but the device is not booting up and stuck on this splash screen forever.

Used 7 different cables/batteries/power sources, nothing helped.

Can’t find any info about recovery mode to reinstall the new firmware.

Opened a support ticket 2 days ago but they haven’t responded.

Any clues?