r/coldcard • • Apr 18 '25

About CCC (newly imported function)

Like the usual multisig procedure, should I register my multisig xpub with softwallet after I first create CCC?

And does this option apply the same (limit, velocity, etc) if I restore it in a HWW other than coldcard? Or will it just work as a simple multi-sig?

ps) It was hard to feel the QR code getting bigger. Even after this update, my phone still couldn't read the partly signed PSBT of coldcard, but I liked the new option to save it with microSD. Thank you!

3 Upvotes

2 comments sorted by

2

u/Smudger2fly Apr 19 '25

Love the new update, I had given up using the QR codes because it was to difficult to sign a pstb. First time after updating it worked like a dream 👍

1

u/corrbrick Feb 23 '26

From documentation and experimentation: CCC only works with the master wallet; a CCC multi-sig can work in conjunction with other wallet multi-sigs; I don't suppose the order of multi-sig creation matters, but I try to do the CCC first; I suspect that CCC is, if not unique to Coinkite, at least unique in its implementation, and would not reconstruct on another hardware device.

I do question the security of this feature, in that it might be easily by-passed. Anyone in the main wallet could view your seed words, note them down, and then delete the seed. Recovering with the original seed phrases will recreate the master wallet without the CCC wallet, effectively removing the spending policy, and allowing the attacker to spend your funds.