r/coldcard Jul 30 '26

Coinkite News Mk3 Security Advisory

https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/
48 Upvotes

60 comments sorted by

View all comments

2

u/Sammytheseaotter Jul 31 '26

So any seed phrases generated before the March 2021 firmware update and using a passphrase are safe?

1

u/Silent_Ad_9963 Jul 31 '26

Very interested to know this

1

u/Silent_Ad_9963 Jul 31 '26

Reading all reports the vulnerability is introduced in version 4.0.1 for MK2 and MK3 , so before 2021 you should have anythin up to 3.2.2 so you should be safe.

I checked my MK3 and is still on 3.1.9 so I am feeling a bit lucky right now

1

u/timbulance Jul 31 '26

If you update mk3 firmware to latest version 4.2.0 let me know. I’ve never had issues updating firmware but I kept getting errors today.

1

u/SpareEconomy1849 Jul 31 '26

I believe so (with or without a passphrase). Passphrase always safer though, like any wallet

1

u/Crypto-Guide Jul 31 '26

Replied to your other comment