{ "version": "https://jsonfeed.org/version/1.1", "title": "cc-vuln.org source change record", "home_page_url": "https://cc-vuln.org/record/changes/", "feed_url": "https://cc-vuln.org/record/changes.json", "description": "Reviewed source-content changes, unreviewed differences and preserved collection noise. Feed timestamps are observation times; bounded revision windows are carried per item.", "items": [ { "id": "samsamskies-tracker-readme@20260802T010028Z", "url": "https://cc-vuln.org/record/sources/samsamskies-tracker-readme/", "title": "Source of the community holdings tracker: unreviewed", "content_text": "This detected difference has not yet been reviewed for capture noise. The difference was observed within the bounded interval 2026-08-02T00:26:40Z to 2026-08-02T01:00:28Z.", "date_published": "2026-08-02T01:00:28Z", "tags": [ "unreviewed", "chain-monitor" ], "_cc_vuln": { "source_id": "samsamskies-tracker-readme", "original_url": "https://raw.githubusercontent.com/SamSamskies/coldcard-hack-tracker/main/README.md", "observed_at": "2026-08-02T01:00:28Z", "revision_window_start": "2026-08-02T00:26:40Z", "revision_window_end": "2026-08-02T01:00:28Z", "classification": "unreviewed", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 10, "removed_lines": 4 } }, { "id": "coldcard-hack-tracker@20260802T005959Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: unreviewed", "content_text": "This detected difference has not yet been reviewed for capture noise. The difference was observed within the bounded interval 2026-08-02T00:31:24Z to 2026-08-02T00:59:59Z.", "date_published": "2026-08-02T00:59:59Z", "tags": [ "unreviewed", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-02T00:59:59Z", "revision_window_start": "2026-08-02T00:31:24Z", "revision_window_end": "2026-08-02T00:59:59Z", "classification": "unreviewed", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1166, "removed_lines": 26 } }, { "id": "coldcard-watch@20260802T005957Z", "url": "https://cc-vuln.org/record/sources/coldcard-watch/", "title": "COLDCARD funds flow monitor: unreviewed", "content_text": "This detected difference has not yet been reviewed for capture noise. The difference was observed within the bounded interval 2026-08-01T17:43:04Z to 2026-08-02T00:59:57Z.", "date_published": "2026-08-02T00:59:57Z", "tags": [ "unreviewed", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-watch", "original_url": "https://coldcard-watch.vercel.app/", "observed_at": "2026-08-02T00:59:57Z", "revision_window_start": "2026-08-01T17:43:04Z", "revision_window_end": "2026-08-02T00:59:57Z", "classification": "unreviewed", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 3, "removed_lines": 3 } }, { "id": "coldcard-hack-tracker@20260802T003124Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: unreviewed", "content_text": "This detected difference has not yet been reviewed for capture noise. The difference was observed within the bounded interval 2026-08-02T00:17:55Z to 2026-08-02T00:31:24Z.", "date_published": "2026-08-02T00:31:24Z", "tags": [ "unreviewed", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-02T00:31:24Z", "revision_window_start": "2026-08-02T00:17:55Z", "revision_window_end": "2026-08-02T00:31:24Z", "classification": "unreviewed", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 12, "removed_lines": 36 } }, { "id": "coldcard-hack-tracker@20260802T001755Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: unreviewed", "content_text": "This detected difference has not yet been reviewed for capture noise. The difference was observed within the bounded interval 2026-08-02T00:11:02Z to 2026-08-02T00:17:55Z.", "date_published": "2026-08-02T00:17:55Z", "tags": [ "unreviewed", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-02T00:17:55Z", "revision_window_start": "2026-08-02T00:11:02Z", "revision_window_end": "2026-08-02T00:17:55Z", "classification": "unreviewed", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 2, "removed_lines": 2 } }, { "id": "coldcard-hack-tracker@20260802T001102Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The operator rebuilt the tracker around a five-wave model: the July 31 entry split into Galaxy Wave 2 and a new Galaxy Wave 3 spanning Jul 31 to Aug 1, the headline total moved from 1,130.09411114 to 1,368.58411114 BTC, consolidated holdings from 1,130.00551671 to 1,160.19028 BTC, and the July 30 heading was renamed from Galaxy fingerprint to Galaxy Wave 1. The difference was observed within the bounded interval 2026-08-01T21:52:43Z to 2026-08-02T00:11:02Z.", "date_published": "2026-08-02T00:11:02Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-02T00:11:02Z", "revision_window_start": "2026-08-01T21:52:43Z", "revision_window_end": "2026-08-02T00:11:02Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 56, "removed_lines": 30 } }, { "id": "coin360-drain@20260802T000905Z", "url": "https://cc-vuln.org/record/sources/coin360-drain/", "title": "COLDCARD wallet drain report: capture-noise", "content_text": "A relative-age label the enabled normalizer did not match in its literal form; the article body is unchanged. The difference was observed within the bounded interval 2026-08-01T16:10:12Z to 2026-08-02T00:09:05Z.", "date_published": "2026-08-02T00:09:05Z", "tags": [ "capture-noise", "reporting" ], "_cc_vuln": { "source_id": "coin360-drain", "original_url": "https://coin360.com/news/coldcard-flaws-bitcoin-wallet-drain", "observed_at": "2026-08-02T00:09:05Z", "revision_window_start": "2026-08-01T16:10:12Z", "revision_window_end": "2026-08-02T00:09:05Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "theblock-galaxy-total@20260801T222620Z", "url": "https://cc-vuln.org/record/sources/theblock-galaxy-total/", "title": "Galaxy loss estimate reporting: capture-noise", "content_text": "Only the site chrome's rotating latest-news list changed; the incident article text, including its Galaxy total, was unchanged. The difference was observed within the bounded interval 2026-08-01T16:10:02Z to 2026-08-01T22:26:20Z.", "date_published": "2026-08-01T22:26:20Z", "tags": [ "capture-noise", "reporting" ], "_cc_vuln": { "source_id": "theblock-galaxy-total", "original_url": "https://www.theblock.co/post/410332/bitcoin-losses-linked-coldcard-vulnerability-70-million-galaxy-research", "observed_at": "2026-08-01T22:26:20Z", "revision_window_start": "2026-08-01T16:10:02Z", "revision_window_end": "2026-08-01T22:26:20Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 4, "removed_lines": 4 } }, { "id": "btcpp-dettmer-commit-history@20260801T222514Z", "url": "https://cc-vuln.org/record/sources/btcpp-dettmer-commit-history/", "title": "Dettmer commit-history analysis of the entropy bug: source-content", "content_text": "A reader comment from Frank Corva was added to the post's discussion, posted after the preceding capture rather than progressively rendered from it. Substack like and restack counters changed in the same capture. The guest post's own text was unchanged. The difference was observed within the bounded interval 2026-08-01T17:17:17Z to 2026-08-01T22:25:14Z.", "date_published": "2026-08-01T22:25:14Z", "tags": [ "source-content", "independent-analysis" ], "_cc_vuln": { "source_id": "btcpp-dettmer-commit-history", "original_url": "https://insider.btcpp.dev/p/when-randombytes-runs-but-doesnt", "observed_at": "2026-08-01T22:25:14Z", "revision_window_start": "2026-08-01T17:17:17Z", "revision_window_end": "2026-08-01T22:25:14Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 9, "removed_lines": 0 } }, { "id": "coldcard-hack-tracker@20260801T215243Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: capture-noise", "content_text": "Only the live fiat conversion changed; the BTC totals, cluster descriptions and movement state were unchanged. The difference was observed within the bounded interval 2026-08-01T21:21:08Z to 2026-08-01T21:52:43Z.", "date_published": "2026-08-01T21:52:43Z", "tags": [ "capture-noise", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T21:52:43Z", "revision_window_start": "2026-08-01T21:21:08Z", "revision_window_end": "2026-08-01T21:52:43Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "coldcard-hack-tracker@20260801T212108Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The evening-wave description gained a clause noting that the Kelbie vault also occurred on 31 July; the live fiat conversion changed in the same capture. The difference was observed within the bounded interval 2026-08-01T20:50:08Z to 2026-08-01T21:21:08Z.", "date_published": "2026-08-01T21:21:08Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T21:21:08Z", "revision_window_start": "2026-08-01T20:50:08Z", "revision_window_end": "2026-08-01T21:21:08Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 2, "removed_lines": 2 } }, { "id": "coldcard-hack-tracker@20260801T205008Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: capture-noise", "content_text": "Only the live fiat conversion changed; the BTC totals, cluster descriptions and movement state were unchanged. The difference was observed within the bounded interval 2026-08-01T20:18:43Z to 2026-08-01T20:50:08Z.", "date_published": "2026-08-01T20:50:08Z", "tags": [ "capture-noise", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T20:50:08Z", "revision_window_start": "2026-08-01T20:18:43Z", "revision_window_end": "2026-08-01T20:50:08Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "coldcard-hack-tracker@20260801T201843Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: capture-noise", "content_text": "Only the live fiat conversion changed; the BTC totals, cluster descriptions and movement state were unchanged. The difference was observed within the bounded interval 2026-08-01T19:47:28Z to 2026-08-01T20:18:43Z.", "date_published": "2026-08-01T20:18:43Z", "tags": [ "capture-noise", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T20:18:43Z", "revision_window_start": "2026-08-01T19:47:28Z", "revision_window_end": "2026-08-01T20:18:43Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "coldcard-hack-tracker@20260801T194728Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The tracked total rose to 1,130.09411114 BTC after a delayed 0.19 BTC victim consolidation joined the Aug 1 hop vault. The tracker also recorded an Ocean block-960511 miner payout that touched the hop address and was peeled off, listing it as a possible lead that it does not count as stolen. The difference was observed within the bounded interval 2026-08-01T19:16:23Z to 2026-08-01T19:47:28Z.", "date_published": "2026-08-01T19:47:28Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T19:47:28Z", "revision_window_start": "2026-08-01T19:16:23Z", "revision_window_end": "2026-08-01T19:47:28Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 14, "removed_lines": 10 } }, { "id": "wizardsardine-postmortem@20260801T194720Z", "url": "https://cc-vuln.org/record/sources/wizardsardine-postmortem/", "title": "Wizardsardine post-mortem and user guidance: source-content", "content_text": "Wizardsardine added explicit Section 3 and Section 4 labels to two previously unlabelled headings and renumbered the two that followed from 3 and 4 to 5 and 6. In the same edit the TAPSIGNER, OPENDIME and SATSCARD paragraph changed from a flat statement that they are not affected to Coinkite's claim plus the qualification that their proprietary code prevents the authors stating with certainty that the devices are safe, while noting the architecture is not a MicroPython stack. The difference was observed within the bounded interval 2026-08-01T17:17:15Z to 2026-08-01T19:47:20Z.", "date_published": "2026-08-01T19:47:20Z", "tags": [ "source-content", "independent-analysis" ], "_cc_vuln": { "source_id": "wizardsardine-postmortem", "original_url": "https://wizardsardine.com/blog/coldcard-rng-vulnerability/", "observed_at": "2026-08-01T19:47:20Z", "revision_window_start": "2026-08-01T17:17:15Z", "revision_window_end": "2026-08-01T19:47:20Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 5, "removed_lines": 5 } }, { "id": "coldcard-hack-tracker@20260801T191623Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The tracker added a 'TOTAL STOLEN' headline of 1,129.90257437 BTC with a four-wave breakdown chart, and raised the balance on watch to 1,130.00551671 BTC after a second UTXO reached the Aug 1 hop vault. The difference was observed within the bounded interval 2026-08-01T18:45:24Z to 2026-08-01T19:16:23Z.", "date_published": "2026-08-01T19:16:23Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T19:16:23Z", "revision_window_start": "2026-08-01T18:45:24Z", "revision_window_end": "2026-08-01T19:16:23Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 37, "removed_lines": 5 } }, { "id": "coldcard-hack-tracker@20260801T184524Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The tracked total rose from 1,129.31416148 to 1,129.81397994 BTC, a separate 'Aug 1 hop vault' holding was added to the evening-wave cluster, the risk checklist gained Mk3 5.0.1 to 5.0.3, a seed-origin item and revised passphrase wording, and WizardSardine and Kevin Loaec were added as sources. The difference was observed within the bounded interval 2026-08-01T17:43:06Z to 2026-08-01T18:45:24Z.", "date_published": "2026-08-01T18:45:24Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T18:45:24Z", "revision_window_start": "2026-08-01T17:43:06Z", "revision_window_end": "2026-08-01T18:45:24Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 27, "removed_lines": 11 } }, { "id": "coinkite-mk3-advisory@20260801T184433Z", "url": "https://cc-vuln.org/record/sources/coinkite-mk3-advisory/", "title": "Mk3 security advisory: source-content", "content_text": "Fourth recorded revision of the advisory, and the one that resolves the Mk2 question this archive had tracked as open. The update stamp moved to August 1, 2026 at 2:35 p.m. EDT and every Mk3-only statement about the defect and its fix now names both models: the fixed-firmware list reads 'Mk2/Mk3: version 4.2.0 or later', the affected range reads 'The issue is present on Mk2 and Mk3 firmware versions 4.0.1 through 4.1.9 inclusive', the at-risk sentence covers 'a seed generated on Mk2 or Mk3 version 4.0.1 (March 2021) through 4.1.9', and the release is described as 'Fixed Mk2/Mk3 firmware version 4.2.0' from the 'official Mk2/Mk3 download page'. The one-device migration section, the optional dice-only section and the closing migration steps were rewritten from Mk3-only to Mk2-or-Mk3 wording. Until this revision the vendor downloads-page listing was the only vendor evidence placing the Mk2 in the affected range or the hotfix. The published lower bound is unchanged at 4.0.1 for both models, so the v4.0.0 divergence recorded on the firmware page is untouched. The difference was observed within the bounded interval 2026-08-01T14:02:34Z to 2026-08-01T18:44:33Z.", "date_published": "2026-08-01T18:44:33Z", "tags": [ "source-content", "vendor-advisory" ], "_cc_vuln": { "source_id": "coinkite-mk3-advisory", "original_url": "https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/", "observed_at": "2026-08-01T18:44:33Z", "revision_window_start": "2026-08-01T14:02:34Z", "revision_window_end": "2026-08-01T18:44:33Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 30, "removed_lines": 29 } }, { "id": "coinkite-backgrounder@20260801T184429Z", "url": "https://cc-vuln.org/record/sources/coinkite-backgrounder/", "title": "Entropy technical backgrounder: source-content", "content_text": "Coinkite moved the backgrounder's update stamp to August 1, 2026 at 2:35 p.m. EDT and replaced Mk3 with Mk2 or Mk3 throughout: the affected firmware range became 'The affected Mk2 and Mk3 firmware range is 4.0.1 through 4.1.9', the seeded-PRNG analysis became 'On Mk2 and Mk3, the active PRNG was seeded primarily from device and timing state', the hotfix list became 'Version 4.2.0 for Mk2 and Mk3', and the migration steps and the pointer to the dedicated advisory were rewritten the same way. The difference was observed within the bounded interval 2026-08-01T14:02:31Z to 2026-08-01T18:44:29Z.", "date_published": "2026-08-01T18:44:29Z", "tags": [ "source-content", "vendor-advisory" ], "_cc_vuln": { "source_id": "coinkite-backgrounder", "original_url": "https://blog.coinkite.com/entropy-technical-backgrounder/", "observed_at": "2026-08-01T18:44:29Z", "revision_window_start": "2026-08-01T14:02:31Z", "revision_window_end": "2026-08-01T18:44:29Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 11, "removed_lines": 10 } }, { "id": "reddit-drained-timeline@20260801T181342Z", "url": "https://cc-vuln.org/record/sources/reddit-drained-timeline/", "title": "Wallet drained timeline: capture-noise", "content_text": "Two already-held comments swapped position in the rendered thread. No post or comment text was added, removed or altered, and the enabled normalizer already suppresses relative-time labels and engagement counts, so comment ordering is the only remaining difference. Reddit orders comments dynamically, so this is rendering variance rather than an edit by the author or moderators. The difference was observed within the bounded interval 2026-08-01T09:58:01Z to 2026-08-01T18:13:42Z.", "date_published": "2026-08-01T18:13:42Z", "tags": [ "capture-noise", "victim-account" ], "_cc_vuln": { "source_id": "reddit-drained-timeline", "original_url": "https://www.reddit.com/r/Bitcoin/comments/1vb6teq/wallet_drained_timeline/", "observed_at": "2026-08-01T18:13:42Z", "revision_window_start": "2026-08-01T09:58:01Z", "revision_window_end": "2026-08-01T18:13:42Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 10, "removed_lines": 10 } }, { "id": "coldcard-hack-tracker@20260801T174306Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The tracker restated its movement feed in terms of the reported consolidation only: the earlier outbound spend and unconfirmed hop were removed from the feed, last movement returned to 'Unmoved', and a note was added that later surplus passing through a vault is ignored while the reported balance remains. The difference was observed within the bounded interval 2026-08-01T17:12:32Z to 2026-08-01T17:43:06Z.", "date_published": "2026-08-01T17:43:06Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T17:43:06Z", "revision_window_start": "2026-08-01T17:12:32Z", "revision_window_end": "2026-08-01T17:43:06Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 6, "removed_lines": 17 } }, { "id": "coldcard-watch@20260801T174304Z", "url": "https://cc-vuln.org/record/sources/coldcard-watch/", "title": "COLDCARD funds flow monitor: source-content", "content_text": "The tracker's headline moved from 1,128.6633 BTC across 2,334 verified addresses to 1,158.8480 BTC across 2,686, and its address-check copy changed with it. The cluster description of three windows on 30 and 31 July was unchanged. The difference was observed within the bounded interval 2026-08-01T14:03:09Z to 2026-08-01T17:43:04Z.", "date_published": "2026-08-01T17:43:04Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-watch", "original_url": "https://coldcard-watch.vercel.app/", "observed_at": "2026-08-01T17:43:04Z", "revision_window_start": "2026-08-01T14:03:09Z", "revision_window_end": "2026-08-01T17:43:04Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 3, "removed_lines": 3 } }, { "id": "coldcard-firmware-pr-691@20260801T174121Z", "url": "https://cc-vuln.org/record/sources/coldcard-firmware-pr-691/", "title": "COLDCARD firmware PR #691: pass the full secure-element digest: source-content", "content_text": "The author marked the pull request as a draft at 16:13 and rewrote its description. The submodule bump note became a re-pin to the companion RNG fix, and the stated dependency moved from switck/libngu#60 to #61, described as replacing the generator with a SHA-256 Hash-DRBG and making reseed() require a seed of at least 32 bytes, so this firmware change becomes a prerequisite for #61 booting on-device. GitHub edited-comment and loading-error chrome appeared in the same capture. The difference was observed within the bounded interval 2026-08-01T16:08:24Z to 2026-08-01T17:41:21Z.", "date_published": "2026-08-01T17:41:21Z", "tags": [ "source-content", "repo-pr" ], "_cc_vuln": { "source_id": "coldcard-firmware-pr-691", "original_url": "https://github.com/Coldcard/firmware/pull/691", "observed_at": "2026-08-01T17:41:21Z", "revision_window_start": "2026-08-01T16:08:24Z", "revision_window_end": "2026-08-01T17:41:21Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 17, "removed_lines": 9 } }, { "id": "libngu-pr-60@20260801T174116Z", "url": "https://cc-vuln.org/record/sources/libngu-pr-60/", "title": "libngu PR #60: full-width reseeding: source-content", "content_text": "The inline cross-reference to Coldcard/firmware#691 changed from Open to Draft, reflecting a real state change on that pull request rather than rendering variance. Nothing else moved: no discussion, review or patch text on this pull request changed. The underlying state change is captured directly on coldcard-firmware-pr-691 at 20260801T174121Z, so this entry is the same event seen from the linked repository. The difference was observed within the bounded interval 2026-08-01T16:08:18Z to 2026-08-01T17:41:16Z.", "date_published": "2026-08-01T17:41:16Z", "tags": [ "source-content", "repo-pr" ], "_cc_vuln": { "source_id": "libngu-pr-60", "original_url": "https://github.com/switck/libngu/pull/60", "observed_at": "2026-08-01T17:41:16Z", "revision_window_start": "2026-08-01T16:08:18Z", "revision_window_end": "2026-08-01T17:41:16Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "coldcard-hack-tracker@20260801T171232Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The tracker added an unconfirmed hop-1 movement of 0.4998206 BTC onward from the followed destination of the evening vault's first outbound spend. The difference was observed within the bounded interval 2026-08-01T16:41:20Z to 2026-08-01T17:12:32Z.", "date_published": "2026-08-01T17:12:32Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T17:12:32Z", "revision_window_start": "2026-08-01T16:41:20Z", "revision_window_end": "2026-08-01T17:12:32Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 8, "removed_lines": 0 } }, { "id": "kelbie-rng-postmortem@20260801T171200Z", "url": "https://cc-vuln.org/record/sources/kelbie-rng-postmortem/", "title": "Chain-derived COLDCARD RNG postmortem: source-content", "content_text": "The README added derivation sections on grouping waves into families by build traits rather than configuration dials, on fee pricing and its lack of correlation with value, on wave colour, and on re-applying Block's published seven-property fingerprint across the whole record, plus a new fingerprint script in the file map. The difference was observed within the bounded interval 2026-08-01T16:07:15Z to 2026-08-01T17:12:00Z.", "date_published": "2026-08-01T17:12:00Z", "tags": [ "source-content", "independent-analysis" ], "_cc_vuln": { "source_id": "kelbie-rng-postmortem", "original_url": "https://raw.githubusercontent.com/Kelbie/coldcard-rng-postmortem/main/README.md", "observed_at": "2026-08-01T17:12:00Z", "revision_window_start": "2026-08-01T16:07:15Z", "revision_window_end": "2026-08-01T17:12:00Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 43, "removed_lines": 3 } }, { "id": "coldcard-hack-tracker@20260801T164120Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The tracker withdrew the Mk4 attribution for the 1 August morning wave, recording the seed as Mk3-origin, removed the 'Mk4 is in scope now' panel, and recorded the first outbound spend of 0.4099166 BTC from the evening vault at 16:33 UTC. The difference was observed within the bounded interval 2026-08-01T16:07:44Z to 2026-08-01T16:41:20Z.", "date_published": "2026-08-01T16:41:20Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T16:41:20Z", "revision_window_start": "2026-08-01T16:07:44Z", "revision_window_end": "2026-08-01T16:41:20Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 12, "removed_lines": 11 } }, { "id": "coin360-drain@20260801T161012Z", "url": "https://cc-vuln.org/record/sources/coin360-drain/", "title": "COLDCARD wallet drain report: capture-noise", "content_text": "Only the article's relative-time label changed, this time to the word 'yesterday', which the existing relative-time normalizer does not match. The article body was unchanged. The difference was observed within the bounded interval 2026-08-01T03:51:25Z to 2026-08-01T16:10:12Z.", "date_published": "2026-08-01T16:10:12Z", "tags": [ "capture-noise", "reporting" ], "_cc_vuln": { "source_id": "coin360-drain", "original_url": "https://coin360.com/news/coldcard-flaws-bitcoin-wallet-drain", "observed_at": "2026-08-01T16:10:12Z", "revision_window_start": "2026-08-01T03:51:25Z", "revision_window_end": "2026-08-01T16:10:12Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "theblock-galaxy-total@20260801T161002Z", "url": "https://cc-vuln.org/record/sources/theblock-galaxy-total/", "title": "Galaxy loss estimate reporting: capture-noise", "content_text": "Only the site chrome's rotating latest-news list changed; the incident article text was unchanged. The difference was observed within the bounded interval 2026-08-01T08:12:59Z to 2026-08-01T16:10:02Z.", "date_published": "2026-08-01T16:10:02Z", "tags": [ "capture-noise", "reporting" ], "_cc_vuln": { "source_id": "theblock-galaxy-total", "original_url": "https://www.theblock.co/post/410332/bitcoin-losses-linked-coldcard-vulnerability-70-million-galaxy-research", "observed_at": "2026-08-01T16:10:02Z", "revision_window_start": "2026-08-01T08:12:59Z", "revision_window_end": "2026-08-01T16:10:02Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 2, "removed_lines": 2 } }, { "id": "passport-not-affected@20260801T160953Z", "url": "https://cc-vuln.org/record/sources/passport-not-affected/", "title": "Passport is not affected: source-content", "content_text": "Foundation added a reply to the thread saying manual firmware updates outside Envoy are scheduled for the next but one release, with no definitive timeframe committed. The difference was observed within the bounded interval 2026-08-01T00:46:19Z to 2026-08-01T16:09:53Z.", "date_published": "2026-08-01T16:09:53Z", "tags": [ "source-content", "vendor-statement" ], "_cc_vuln": { "source_id": "passport-not-affected", "original_url": "https://community.foundation.xyz/t/important-passport-is-not-affected-by-the-coldcard-seed-vulnerability/1147", "observed_at": "2026-08-01T16:09:53Z", "revision_window_start": "2026-08-01T00:46:19Z", "revision_window_end": "2026-08-01T16:09:53Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 4, "removed_lines": 0 } }, { "id": "coinkite-terms@20260801T160833Z", "url": "https://cc-vuln.org/record/sources/coinkite-terms/", "title": "Coinkite terms of sale: source-content", "content_text": "The site-wide advisory banner on the terms page hardened from 'Seeds generated on firmware 4.0.1 or later may be at risk' to 'Seeds generated on firmware 4.0.1 (2021 or later) are at risk', matching the downloads page. The difference was observed within the bounded interval 2026-08-01T03:25:25Z to 2026-08-01T16:08:33Z.", "date_published": "2026-08-01T16:08:33Z", "tags": [ "source-content", "vendor-legal" ], "_cc_vuln": { "source_id": "coinkite-terms", "original_url": "https://coinkite.com/terms", "observed_at": "2026-08-01T16:08:33Z", "revision_window_start": "2026-08-01T03:25:25Z", "revision_window_end": "2026-08-01T16:08:33Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "coldcard-firmware-pr-691@20260801T160824Z", "url": "https://cc-vuln.org/record/sources/coldcard-firmware-pr-691/", "title": "COLDCARD firmware PR #691: pass the full secure-element digest: source-content", "content_text": "The pull request gained a further comment repeating the request to raise the libngu changes as a separate pull request against the libngu repository, linking switck/libngu#60; reaction totals were normalized in the same capture. The difference was observed within the bounded interval 2026-08-01T07:34:40Z to 2026-08-01T16:08:24Z.", "date_published": "2026-08-01T16:08:24Z", "tags": [ "source-content", "repo-pr" ], "_cc_vuln": { "source_id": "coldcard-firmware-pr-691", "original_url": "https://github.com/Coldcard/firmware/pull/691", "observed_at": "2026-08-01T16:08:24Z", "revision_window_start": "2026-08-01T07:34:40Z", "revision_window_end": "2026-08-01T16:08:24Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 12, "removed_lines": 0 } }, { "id": "libngu-pr-60-patch@20260801T160821Z", "url": "https://cc-vuln.org/record/sources/libngu-pr-60-patch/", "title": "libngu PR #60 patch: source-content", "content_text": "The published patch series gained a second commit adding a ValueError on an empty seed, a regression test and a comment documenting the generator's roughly 72-bit independent state. The difference was observed within the bounded interval 2026-08-01T06:39:32Z to 2026-08-01T16:08:21Z.", "date_published": "2026-08-01T16:08:21Z", "tags": [ "source-content", "repo-patch" ], "_cc_vuln": { "source_id": "libngu-pr-60-patch", "original_url": "https://github.com/switck/libngu/pull/60.patch", "observed_at": "2026-08-01T16:08:21Z", "revision_window_start": "2026-08-01T06:39:32Z", "revision_window_end": "2026-08-01T16:08:21Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 61, "removed_lines": 1 } }, { "id": "libngu-pr-60@20260801T160818Z", "url": "https://cc-vuln.org/record/sources/libngu-pr-60/", "title": "libngu PR #60: full-width reseeding: source-content", "content_text": "Two contributors reviewed the reseed change, the author pushed a second commit rejecting a zero-length seed and documenting a roughly 72-bit state ceiling, a reviewer argued for removing Yasmarang entirely and announced a competing pull request, and the author closed this one in favour of #61. The difference was observed within the bounded interval 2026-08-01T06:21:09Z to 2026-08-01T16:08:18Z.", "date_published": "2026-08-01T16:08:18Z", "tags": [ "source-content", "repo-pr" ], "_cc_vuln": { "source_id": "libngu-pr-60", "original_url": "https://github.com/switck/libngu/pull/60", "observed_at": "2026-08-01T16:08:18Z", "revision_window_start": "2026-08-01T06:21:09Z", "revision_window_end": "2026-08-01T16:08:18Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 78, "removed_lines": 7 } }, { "id": "libngu-pr-59@20260801T160811Z", "url": "https://cc-vuln.org/record/sources/libngu-pr-59/", "title": "libngu PR #59: source-content", "content_text": "The pull request was closed by its author in favour of a three-pull-request stack (#62, #63 and #64) described as summing to a byte-identical tree, with a suggested review order and an offer to reopen. The difference was observed within the bounded interval 2026-08-01T03:50:19Z to 2026-08-01T16:08:11Z.", "date_published": "2026-08-01T16:08:11Z", "tags": [ "source-content", "repo-pr" ], "_cc_vuln": { "source_id": "libngu-pr-59", "original_url": "https://github.com/switck/libngu/pull/59", "observed_at": "2026-08-01T16:08:11Z", "revision_window_start": "2026-08-01T03:50:19Z", "revision_window_end": "2026-08-01T16:08:11Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 20, "removed_lines": 2 } }, { "id": "coldcard-hack-tracker@20260801T160744Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The tracker's watched balance rose from 1,129.31416148 BTC to 1,129.6240794 BTC and the evening vault's displayed balance and UTXO count changed, while the reported consolidated figure for that vault stayed at 0.50980268 BTC. The difference was observed within the bounded interval 2026-08-01T15:36:39Z to 2026-08-01T16:07:44Z.", "date_published": "2026-08-01T16:07:44Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T16:07:44Z", "revision_window_start": "2026-08-01T15:36:39Z", "revision_window_end": "2026-08-01T16:07:44Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 3, "removed_lines": 3 } }, { "id": "kelbie-rng-postmortem@20260801T160715Z", "url": "https://cc-vuln.org/record/sources/kelbie-rng-postmortem/", "title": "Chain-derived COLDCARD RNG postmortem: source-content", "content_text": "The README renamed waves from ordinal numbers to block heights throughout, so 'wave 3' became 'wave 960188' and Block's 'waves 1 and 2' became 'waves 960183 and 960185'. The difference was observed within the bounded interval 2026-08-01T05:59:38Z to 2026-08-01T16:07:15Z.", "date_published": "2026-08-01T16:07:15Z", "tags": [ "source-content", "independent-analysis" ], "_cc_vuln": { "source_id": "kelbie-rng-postmortem", "original_url": "https://raw.githubusercontent.com/Kelbie/coldcard-rng-postmortem/main/README.md", "observed_at": "2026-08-01T16:07:15Z", "revision_window_start": "2026-08-01T05:59:38Z", "revision_window_end": "2026-08-01T16:07:15Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 4, "removed_lines": 4 } }, { "id": "coldcard-hack-tracker@20260801T153639Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The tracker added an 'Aug 1 morning wave' cluster with a new vault address holding 0.33203236 BTC from 16 sweeps, described it as including a reported Mk4 RNG and duress-wallet honeypot attributed to Tomer Strolight while noting the device model is not visible on chain, added an 'Mk4 is in scope now' panel, and changed its headline to a running total. The difference was observed within the bounded interval 2026-08-01T15:05:28Z to 2026-08-01T15:36:39Z.", "date_published": "2026-08-01T15:36:39Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T15:36:39Z", "revision_window_start": "2026-08-01T15:05:28Z", "revision_window_end": "2026-08-01T15:36:39Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 25, "removed_lines": 8 } }, { "id": "coldcard-hack-tracker@20260801T150528Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The tracker replaced its likely-exposed paragraph with a per-model vulnerable and fixed version table covering Mk3, Mk4, Mk5, Q and both Edge tracks, and moved the evening vault's block reference from the row label into the cluster description. The difference was observed within the bounded interval 2026-08-01T14:34:18Z to 2026-08-01T15:05:28Z.", "date_published": "2026-08-01T15:05:28Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T15:05:28Z", "revision_window_start": "2026-08-01T14:34:18Z", "revision_window_end": "2026-08-01T15:05:28Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 11, "removed_lines": 3 } }, { "id": "coldcard-hack-tracker@20260801T143418Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The tracker rewrote its reader-guidance section against the August 1 advisory and Block's writeup, added a 'beyond the main seed' item covering paper-wallet keys, Seed XOR masks and Key Teleport, clone and Secure Notes material, moved the Galaxy scope figures into the cluster card, and replaced its short source labels with descriptive per-source summaries including CoinDesk and Clay Garrett. Holding 2's UTXO count also changed from one to two. The difference was observed within the bounded interval 2026-08-01T14:03:11Z to 2026-08-01T14:34:18Z.", "date_published": "2026-08-01T14:34:18Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T14:34:18Z", "revision_window_start": "2026-08-01T14:03:11Z", "revision_window_end": "2026-08-01T14:34:18Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 33, "removed_lines": 15 } }, { "id": "coldcard-hack-tracker@20260801T140311Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The tracker added a third cluster, an 'Evening wave' of 31 July with its own 0.50980268 BTC vault attributed to Evan Schoenberg, restated every holding at full satoshi precision, and changed its headline from 1,128.56 BTC across two clusters to 1,129.06986038 BTC across three. The difference was observed within the bounded interval 2026-08-01T13:01:13Z to 2026-08-01T14:03:11Z.", "date_published": "2026-08-01T14:03:11Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T14:03:11Z", "revision_window_start": "2026-08-01T13:01:13Z", "revision_window_end": "2026-08-01T14:03:11Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 29, "removed_lines": 15 } }, { "id": "coldcard-watch@20260801T140309Z", "url": "https://cc-vuln.org/record/sources/coldcard-watch/", "title": "COLDCARD funds flow monitor: source-content", "content_text": "The tracker moved from two episodes to three clusters by adding 13 addresses in block 960455, changed the destination set from four addresses to six, revised the same-block count for the last drained address from 250 to 237, and added an explanatory note about the two-scale timeline. The difference was observed within the bounded interval 2026-08-01T13:01:10Z to 2026-08-01T14:03:09Z.", "date_published": "2026-08-01T14:03:09Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-watch", "original_url": "https://coldcard-watch.vercel.app/", "observed_at": "2026-08-01T14:03:09Z", "revision_window_start": "2026-08-01T13:01:10Z", "revision_window_end": "2026-08-01T14:03:09Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 4, "removed_lines": 3 } }, { "id": "coldcard-downloads@20260801T140238Z", "url": "https://cc-vuln.org/record/sources/coldcard-downloads/", "title": "COLDCARD firmware downloads: source-content", "content_text": "The site-wide advisory banner hardened from 'Seeds generated on firmware 4.0.1 or later may be at risk' to 'Seeds generated on firmware 4.0.1 (2021 or later) are at risk'. The difference was observed within the bounded interval 2026-08-01T00:17:31Z to 2026-08-01T14:02:38Z.", "date_published": "2026-08-01T14:02:38Z", "tags": [ "source-content", "vendor-releases" ], "_cc_vuln": { "source_id": "coldcard-downloads", "original_url": "https://coldcard.com/downloads", "observed_at": "2026-08-01T14:02:38Z", "revision_window_start": "2026-08-01T00:17:31Z", "revision_window_end": "2026-08-01T14:02:38Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "coinkite-blog-index@20260801T140236Z", "url": "https://cc-vuln.org/record/sources/coinkite-blog-index/", "title": "Coinkite blog index: source-content", "content_text": "The blog index excerpt for the advisory changed with the advisory itself, from 'Coinkite is warning users who generated a seed using a COLDCARD on firmware versions 4.0.1 throug...' to 'Funds from affected COLDCARD seeds are at risk if the seed lacks 50 independent, private dice rol...'. The difference was observed within the bounded interval 2026-08-01T00:17:31Z to 2026-08-01T14:02:36Z.", "date_published": "2026-08-01T14:02:36Z", "tags": [ "source-content", "vendor-index" ], "_cc_vuln": { "source_id": "coinkite-blog-index", "original_url": "https://blog.coinkite.com/", "observed_at": "2026-08-01T14:02:36Z", "revision_window_start": "2026-08-01T00:17:31Z", "revision_window_end": "2026-08-01T14:02:36Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "coinkite-mk3-advisory@20260801T140234Z", "url": "https://cc-vuln.org/record/sources/coinkite-mk3-advisory/", "title": "Mk3 security advisory: source-content", "content_text": "Third recorded revision of the advisory. It now carries 'Updated August 1, 2026 at 9:35 a.m. EDT' and replaces the blanket warning that Mk3 4.0.1 to 4.1.9 users' funds 'may be at risk' with a conditional statement that funds are at risk unless the seed was created with at least 50 fair, independent, private dice rolls and the wallet is protected by a strong, unique BIP-39 passphrase. The passphrase section changed in both directions: it now states that reduced seed entropy alone is not enough to reach a passphrase wallet, and separately that a strong passphrase does not repair the seed, that passphrase users should also migrate, and that an uncertain passphrase means treating funds as at risk and migrating immediately. The difference was observed within the bounded interval 2026-08-01T00:17:31Z to 2026-08-01T14:02:34Z.", "date_published": "2026-08-01T14:02:34Z", "tags": [ "source-content", "vendor-advisory" ], "_cc_vuln": { "source_id": "coinkite-mk3-advisory", "original_url": "https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/", "observed_at": "2026-08-01T14:02:34Z", "revision_window_start": "2026-08-01T00:17:31Z", "revision_window_end": "2026-08-01T14:02:34Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 19, "removed_lines": 10 } }, { "id": "coinkite-backgrounder@20260801T140231Z", "url": "https://cc-vuln.org/record/sources/coinkite-backgrounder/", "title": "Entropy technical backgrounder: source-content", "content_text": "Coinkite replaced the backgrounder's fixed-firmware banner with an August 1 update stating that funds are at risk unless the seed was created with at least 50 independent private dice rolls and the wallet is protected by a strong, unique BIP-39 passphrase, added a paragraph qualifying what counts as such a passphrase, and added a sentence calling the reduced search space a direct security risk rather than a theoretical possibility for wallets meeting neither condition. The difference was observed within the bounded interval 2026-08-01T00:17:31Z to 2026-08-01T14:02:31Z.", "date_published": "2026-08-01T14:02:31Z", "tags": [ "source-content", "vendor-advisory" ], "_cc_vuln": { "source_id": "coinkite-backgrounder", "original_url": "https://blog.coinkite.com/entropy-technical-backgrounder/", "observed_at": "2026-08-01T14:02:31Z", "revision_window_start": "2026-08-01T00:17:31Z", "revision_window_end": "2026-08-01T14:02:31Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 15, "removed_lines": 3 } }, { "id": "coldcard-hack-tracker@20260801T130113Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The monitor changed Holding 1's displayed UTXO count from ten to eleven while its BTC balance and held status remained unchanged. The difference was observed within the bounded interval 2026-08-01T10:26:29Z to 2026-08-01T13:01:13Z.", "date_published": "2026-08-01T13:01:13Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T13:01:13Z", "revision_window_start": "2026-08-01T10:26:29Z", "revision_window_end": "2026-08-01T13:01:13Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "coldcard-watch@20260801T130110Z", "url": "https://cc-vuln.org/record/sources/coldcard-watch/", "title": "COLDCARD funds flow monitor: source-content", "content_text": "The tracker added dashboard, address-list and methodology navigation, described its figures as verified minimums and a floor rather than totals, and changed its checkable address set from 2,321 to 2,334. The difference was observed within the bounded interval 2026-08-01T05:28:59Z to 2026-08-01T13:01:10Z.", "date_published": "2026-08-01T13:01:10Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-watch", "original_url": "https://coldcard-watch.vercel.app/", "observed_at": "2026-08-01T13:01:10Z", "revision_window_start": "2026-08-01T05:28:59Z", "revision_window_end": "2026-08-01T13:01:10Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 11, "removed_lines": 6 } }, { "id": "coldcard-hack-tracker@20260801T102629Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The monitor changed Holding 1's displayed UTXO count from nine to ten while its BTC balance and held status remained unchanged. The difference was observed within the bounded interval 2026-08-01T09:53:15Z to 2026-08-01T10:26:29Z.", "date_published": "2026-08-01T10:26:29Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T10:26:29Z", "revision_window_start": "2026-08-01T09:53:15Z", "revision_window_end": "2026-08-01T10:26:29Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "reddit-drained-timeline@20260801T095801Z", "url": "https://cc-vuln.org/record/sources/reddit-drained-timeline/", "title": "Wallet drained timeline: capture-noise", "content_text": "Fewer lazy-loaded comments were present in this capture than the previous one, and the 'Read more' control was absent. The thread body is unchanged; the missing replies include two that link to the Coinkite advisory. Reddit renders comments progressively, so this is capture variance rather than deletion by the author or moderators. The difference was observed within the bounded interval 2026-08-01T09:52:30Z to 2026-08-01T09:58:01Z.", "date_published": "2026-08-01T09:58:01Z", "tags": [ "capture-noise", "victim-account" ], "_cc_vuln": { "source_id": "reddit-drained-timeline", "original_url": "https://www.reddit.com/r/Bitcoin/comments/1vb6teq/wallet_drained_timeline/", "observed_at": "2026-08-01T09:58:01Z", "revision_window_start": "2026-08-01T09:52:30Z", "revision_window_end": "2026-08-01T09:58:01Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 0, "removed_lines": 83 } }, { "id": "coldcard-hack-tracker@20260801T095315Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The monitor changed Holding 1's displayed UTXO count from eight to nine while its BTC balance and held status remained unchanged. The difference was observed within the bounded interval 2026-08-01T08:35:21Z to 2026-08-01T09:53:15Z.", "date_published": "2026-08-01T09:53:15Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T09:53:15Z", "revision_window_start": "2026-08-01T08:35:21Z", "revision_window_end": "2026-08-01T09:53:15Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "reddit-drained-timeline@20260801T095230Z", "url": "https://cc-vuln.org/record/sources/reddit-drained-timeline/", "title": "Wallet drained timeline: capture-noise", "content_text": "More lazy-loaded comments were rendered in this capture than in the previous one, and the 'Read more' control was present again. This is the inverse of the 09:58:01Z capture and the same progressive-rendering variance; no post or comment text already held was altered. The difference was observed within the bounded interval 2026-08-01T09:21:30Z to 2026-08-01T09:52:30Z.", "date_published": "2026-08-01T09:52:30Z", "tags": [ "capture-noise", "victim-account" ], "_cc_vuln": { "source_id": "reddit-drained-timeline", "original_url": "https://www.reddit.com/r/Bitcoin/comments/1vb6teq/wallet_drained_timeline/", "observed_at": "2026-08-01T09:52:30Z", "revision_window_start": "2026-08-01T09:21:30Z", "revision_window_end": "2026-08-01T09:52:30Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 83, "removed_lines": 0 } }, { "id": "reddit-drained-timeline@20260801T092130Z", "url": "https://cc-vuln.org/record/sources/reddit-drained-timeline/", "title": "Wallet drained timeline: source-content", "content_text": "The rendered thread added a comment linking to Gregory Sanders' reported reproduction; one comment present in the preceding capture was no longer rendered. The difference was observed within the bounded interval 2026-08-01T02:59:16Z to 2026-08-01T09:21:30Z.", "date_published": "2026-08-01T09:21:30Z", "tags": [ "source-content", "victim-account" ], "_cc_vuln": { "source_id": "reddit-drained-timeline", "original_url": "https://www.reddit.com/r/Bitcoin/comments/1vb6teq/wallet_drained_timeline/", "observed_at": "2026-08-01T09:21:30Z", "revision_window_start": "2026-08-01T02:59:16Z", "revision_window_end": "2026-08-01T09:21:30Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 10, "removed_lines": 8 } }, { "id": "coldcard-hack-tracker@20260801T083521Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: capture-correction", "content_text": "The rendered capture again held the monitor's hydrated chain data after the preceding temporary loading-state capture. The difference was observed within the bounded interval 2026-08-01T08:18:05Z to 2026-08-01T08:35:21Z.", "date_published": "2026-08-01T08:35:21Z", "tags": [ "capture-correction", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T08:35:21Z", "revision_window_start": "2026-08-01T08:18:05Z", "revision_window_end": "2026-08-01T08:35:21Z", "classification": "capture-correction", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 61, "removed_lines": 14 } }, { "id": "coldcard-hack-tracker@20260801T081805Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: capture-noise", "content_text": "The rendered capture held the monitor's temporary loading state instead of its hydrated chain data. The difference was observed within the bounded interval 2026-08-01T08:13:31Z to 2026-08-01T08:18:05Z.", "date_published": "2026-08-01T08:18:05Z", "tags": [ "capture-noise", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T08:18:05Z", "revision_window_start": "2026-08-01T08:13:31Z", "revision_window_end": "2026-08-01T08:18:05Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 14, "removed_lines": 61 } }, { "id": "coldcard-hack-tracker@20260801T081331Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The monitor changed Holding 1's displayed UTXO count from seven to eight while its BTC balance and held status remained unchanged. The difference was observed within the bounded interval 2026-08-01T03:51:09Z to 2026-08-01T08:13:31Z.", "date_published": "2026-08-01T08:13:31Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T08:13:31Z", "revision_window_start": "2026-08-01T03:51:09Z", "revision_window_end": "2026-08-01T08:13:31Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "theblock-galaxy-total@20260801T081259Z", "url": "https://cc-vuln.org/record/sources/theblock-galaxy-total/", "title": "Galaxy loss estimate reporting: capture-noise", "content_text": "The live market-ticker region was temporarily unavailable; the incident article text was unchanged. The difference was observed within the bounded interval 2026-08-01T03:22:37Z to 2026-08-01T08:12:59Z.", "date_published": "2026-08-01T08:12:59Z", "tags": [ "capture-noise", "reporting" ], "_cc_vuln": { "source_id": "theblock-galaxy-total", "original_url": "https://www.theblock.co/post/410332/bitcoin-losses-linked-coldcard-vulnerability-70-million-galaxy-research", "observed_at": "2026-08-01T08:12:59Z", "revision_window_start": "2026-08-01T03:22:37Z", "revision_window_end": "2026-08-01T08:12:59Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 6 } }, { "id": "libngu-pr-58@20260801T081150Z", "url": "https://cc-vuln.org/record/sources/libngu-pr-58/", "title": "libngu PR #58: capture-noise", "content_text": "Only the thumbs-up reaction total and reacting-account list changed; the pull-request discussion and patch text were unchanged. The difference was observed within the bounded interval 2026-08-01T03:50:17Z to 2026-08-01T08:11:50Z.", "date_published": "2026-08-01T08:11:50Z", "tags": [ "capture-noise", "repo-pr" ], "_cc_vuln": { "source_id": "libngu-pr-58", "original_url": "https://github.com/switck/libngu/pull/58", "observed_at": "2026-08-01T08:11:50Z", "revision_window_start": "2026-08-01T03:50:17Z", "revision_window_end": "2026-08-01T08:11:50Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 3, "removed_lines": 3 } }, { "id": "coldcard-firmware-pr-691@20260801T073440Z", "url": "https://cc-vuln.org/record/sources/coldcard-firmware-pr-691/", "title": "COLDCARD firmware PR #691: pass the full secure-element digest: source-content", "content_text": "A COLDCARD firmware collaborator asked the author to move the libngu changes into a separate pull request; GitHub review metadata and navigation chrome also changed. The difference was observed within the bounded interval 2026-08-01T06:21:15Z to 2026-08-01T07:34:40Z.", "date_published": "2026-08-01T07:34:40Z", "tags": [ "source-content", "repo-pr" ], "_cc_vuln": { "source_id": "coldcard-firmware-pr-691", "original_url": "https://github.com/Coldcard/firmware/pull/691", "observed_at": "2026-08-01T07:34:40Z", "revision_window_start": "2026-08-01T06:21:15Z", "revision_window_end": "2026-08-01T07:34:40Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 31, "removed_lines": 2 } }, { "id": "coldcard-docs-faq@20260801T070104Z", "url": "https://cc-vuln.org/record/sources/coldcard-docs-faq/", "title": "COLDCARD entropy FAQ: capture-noise", "content_text": "Only the FAQ footer's Last update date changed from July 31 to August 1; no extracted FAQ answer changed. The difference was observed within the bounded interval 2026-08-01T03:51:29Z to 2026-08-01T07:01:04Z.", "date_published": "2026-08-01T07:01:04Z", "tags": [ "capture-noise", "vendor-docs" ], "_cc_vuln": { "source_id": "coldcard-docs-faq", "original_url": "https://coldcard.com/docs/faq/", "observed_at": "2026-08-01T07:01:04Z", "revision_window_start": "2026-08-01T03:51:29Z", "revision_window_end": "2026-08-01T07:01:04Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "coldcard-watch@20260801T052859Z", "url": "https://cc-vuln.org/record/sources/coldcard-watch/", "title": "COLDCARD funds flow monitor: source-content", "content_text": "The tracker expanded from the first 1,195-address episode to two episodes totalling 2,321 addresses and changed its headline from 1,082.5696 BTC to 1,128.4717 BTC. The difference was observed within the bounded interval 2026-08-01T02:34:03Z to 2026-08-01T05:28:59Z.", "date_published": "2026-08-01T05:28:59Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-watch", "original_url": "https://coldcard-watch.vercel.app/", "observed_at": "2026-08-01T05:28:59Z", "revision_window_start": "2026-08-01T02:34:03Z", "revision_window_end": "2026-08-01T05:28:59Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 9, "removed_lines": 9 } }, { "id": "coin360-drain@20260801T035125Z", "url": "https://cc-vuln.org/record/sources/coin360-drain/", "title": "COLDCARD wallet drain report: capture-noise", "content_text": "Only the article's relative-time label changed from 15 hours to 16 hours. The difference was observed within the bounded interval 2026-08-01T02:53:23Z to 2026-08-01T03:51:25Z.", "date_published": "2026-08-01T03:51:25Z", "tags": [ "capture-noise", "reporting" ], "_cc_vuln": { "source_id": "coin360-drain", "original_url": "https://coin360.com/news/coldcard-flaws-bitcoin-wallet-drain", "observed_at": "2026-08-01T03:51:25Z", "revision_window_start": "2026-08-01T02:53:23Z", "revision_window_end": "2026-08-01T03:51:25Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 1, "removed_lines": 1 } }, { "id": "coldcard-hack-tracker@20260801T035109Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: source-content", "content_text": "The tracker added a separately attributed 45.91 BTC post-scan cluster and changed its headline total; live fiat figures also changed in the same capture. The difference was observed within the bounded interval 2026-08-01T03:22:57Z to 2026-08-01T03:51:09Z.", "date_published": "2026-08-01T03:51:09Z", "tags": [ "source-content", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T03:51:09Z", "revision_window_start": "2026-08-01T03:22:57Z", "revision_window_end": "2026-08-01T03:51:09Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 64, "removed_lines": 43 } }, { "id": "libngu-pr-59@20260801T035019Z", "url": "https://cc-vuln.org/record/sources/libngu-pr-59/", "title": "libngu PR #59: source-content", "content_text": "The pull-request author added a comment offering to split the proposal into three smaller changes; GitHub navigation counters also changed. The difference was observed within the bounded interval 2026-08-01T03:25:24Z to 2026-08-01T03:50:19Z.", "date_published": "2026-08-01T03:50:19Z", "tags": [ "source-content", "repo-pr" ], "_cc_vuln": { "source_id": "libngu-pr-59", "original_url": "https://github.com/switck/libngu/pull/59", "observed_at": "2026-08-01T03:50:19Z", "revision_window_start": "2026-08-01T03:25:24Z", "revision_window_end": "2026-08-01T03:50:19Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 14, "removed_lines": 2 } }, { "id": "libngu-pr-58@20260801T035017Z", "url": "https://cc-vuln.org/record/sources/libngu-pr-58/", "title": "libngu PR #58: capture-noise", "content_text": "Only GitHub repository navigation counters changed. The difference was observed within the bounded interval 2026-08-01T03:25:23Z to 2026-08-01T03:50:17Z.", "date_published": "2026-08-01T03:50:17Z", "tags": [ "capture-noise", "repo-pr" ], "_cc_vuln": { "source_id": "libngu-pr-58", "original_url": "https://github.com/switck/libngu/pull/58", "observed_at": "2026-08-01T03:50:17Z", "revision_window_start": "2026-08-01T03:25:23Z", "revision_window_end": "2026-08-01T03:50:17Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 2, "removed_lines": 2 } }, { "id": "coldcard-hack-tracker@20260801T032257Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: capture-noise", "content_text": "Only live fiat conversions changed; the BTC balances and movement state were unchanged. The difference was observed within the bounded interval 2026-08-01T03:05:58Z to 2026-08-01T03:22:57Z.", "date_published": "2026-08-01T03:22:57Z", "tags": [ "capture-noise", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T03:22:57Z", "revision_window_start": "2026-08-01T03:05:58Z", "revision_window_end": "2026-08-01T03:22:57Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 6, "removed_lines": 6 } }, { "id": "theblock-galaxy-total@20260801T032237Z", "url": "https://cc-vuln.org/record/sources/theblock-galaxy-total/", "title": "Galaxy loss estimate reporting: capture-noise", "content_text": "Only live cryptocurrency ticker values in the site navigation changed. The difference was observed within the bounded interval 2026-08-01T03:08:28Z to 2026-08-01T03:22:37Z.", "date_published": "2026-08-01T03:22:37Z", "tags": [ "capture-noise", "reporting" ], "_cc_vuln": { "source_id": "theblock-galaxy-total", "original_url": "https://www.theblock.co/post/410332/bitcoin-losses-linked-coldcard-vulnerability-70-million-galaxy-research", "observed_at": "2026-08-01T03:22:37Z", "revision_window_start": "2026-08-01T03:08:28Z", "revision_window_end": "2026-08-01T03:22:37Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 4, "removed_lines": 4 } }, { "id": "theblock-galaxy-total@20260801T030828Z", "url": "https://cc-vuln.org/record/sources/theblock-galaxy-total/", "title": "Galaxy loss estimate reporting: capture-noise", "content_text": "Only live cryptocurrency ticker values in the site navigation changed. The difference was observed within the bounded interval 2026-08-01T00:46:26Z to 2026-08-01T03:08:28Z.", "date_published": "2026-08-01T03:08:28Z", "tags": [ "capture-noise", "reporting" ], "_cc_vuln": { "source_id": "theblock-galaxy-total", "original_url": "https://www.theblock.co/post/410332/bitcoin-losses-linked-coldcard-vulnerability-70-million-galaxy-research", "observed_at": "2026-08-01T03:08:28Z", "revision_window_start": "2026-08-01T00:46:26Z", "revision_window_end": "2026-08-01T03:08:28Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 5, "removed_lines": 5 } }, { "id": "tftc-who-must-move@20260801T030827Z", "url": "https://cc-vuln.org/record/sources/tftc-who-must-move/", "title": "Who must move their coins: capture-noise", "content_text": "Only rotating related-content cards below the article changed. The difference was observed within the bounded interval 2026-08-01T00:46:24Z to 2026-08-01T03:08:27Z.", "date_published": "2026-08-01T03:08:27Z", "tags": [ "capture-noise", "analysis" ], "_cc_vuln": { "source_id": "tftc-who-must-move", "original_url": "https://www.tftc.io/coldcard-rng-failed-move-your-coins", "observed_at": "2026-08-01T03:08:27Z", "revision_window_start": "2026-08-01T00:46:24Z", "revision_window_end": "2026-08-01T03:08:27Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 10, "removed_lines": 10 } }, { "id": "coldcard-hack-tracker@20260801T030558Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: capture-noise", "content_text": "Only live fiat conversions changed; the BTC balances and movement state were unchanged. The difference was observed within the bounded interval 2026-08-01T02:59:29Z to 2026-08-01T03:05:58Z.", "date_published": "2026-08-01T03:05:58Z", "tags": [ "capture-noise", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T03:05:58Z", "revision_window_start": "2026-08-01T02:59:29Z", "revision_window_end": "2026-08-01T03:05:58Z", "classification": "capture-noise", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 6, "removed_lines": 6 } }, { "id": "coldcard-hack-tracker@20260801T025929Z", "url": "https://cc-vuln.org/record/sources/coldcard-hack-tracker/", "title": "COLDCARD hack tracker: capture-correction", "content_text": "The browser capture obtained the rendered tracker after the initial scripted capture held an empty client-side shell. The difference was observed within the bounded interval 2026-08-01T02:34:16Z to 2026-08-01T02:59:29Z.", "date_published": "2026-08-01T02:59:29Z", "tags": [ "capture-correction", "chain-monitor" ], "_cc_vuln": { "source_id": "coldcard-hack-tracker", "original_url": "https://coldcard-hack-tracker.vercel.app/", "observed_at": "2026-08-01T02:59:29Z", "revision_window_start": "2026-08-01T02:34:16Z", "revision_window_end": "2026-08-01T02:59:29Z", "classification": "capture-correction", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 105, "removed_lines": 0 } }, { "id": "reddit-drained-timeline@20260801T025916Z", "url": "https://cc-vuln.org/record/sources/reddit-drained-timeline/", "title": "Wallet drained timeline: capture-correction", "content_text": "A newly enabled comparison normalizer replaced relative-time labels and engagement counts; the post and comment text did not change. The difference was observed within the bounded interval 2026-08-01T02:45:27Z to 2026-08-01T02:59:16Z.", "date_published": "2026-08-01T02:59:16Z", "tags": [ "capture-correction", "victim-account" ], "_cc_vuln": { "source_id": "reddit-drained-timeline", "original_url": "https://www.reddit.com/r/Bitcoin/comments/1vb6teq/wallet_drained_timeline/", "observed_at": "2026-08-01T02:59:16Z", "revision_window_start": "2026-08-01T02:45:27Z", "revision_window_end": "2026-08-01T02:59:16Z", "classification": "capture-correction", "inherited_from_wayback": false, "baseline_inherited_from_wayback": false, "added_lines": 27, "removed_lines": 27 } }, { "id": "coinkite-mk3-advisory@20260801T001731Z", "url": "https://cc-vuln.org/record/sources/coinkite-mk3-advisory/", "title": "Mk3 security advisory: source-content", "content_text": "Coinkite announced fixed firmware for every affected model and release track, including Mk3 4.2.0, and rewrote the one-device migration guidance. The difference was observed within the bounded interval 2026-07-31T07:30:23Z to 2026-08-01T00:17:31Z.", "date_published": "2026-08-01T00:17:31Z", "tags": [ "source-content", "vendor-advisory" ], "_cc_vuln": { "source_id": "coinkite-mk3-advisory", "original_url": "https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/", "observed_at": "2026-08-01T00:17:31Z", "revision_window_start": "2026-07-31T07:30:23Z", "revision_window_end": "2026-08-01T00:17:31Z", "classification": "source-content", "inherited_from_wayback": false, "baseline_inherited_from_wayback": true, "added_lines": 66, "removed_lines": 53 } }, { "id": "coinkite-mk3-advisory@20260731T073023Z", "url": "https://cc-vuln.org/record/sources/coinkite-mk3-advisory/", "title": "Mk3 security advisory: source-content", "content_text": "Coinkite expanded the affected scope to Mk4, Mk5 and Q, added dice guidance, and revised the passphrase and migration sections. The difference was observed within the bounded interval 2026-07-31T01:56:33Z to 2026-07-31T07:30:23Z.", "date_published": "2026-07-31T07:30:23Z", "tags": [ "source-content", "vendor-advisory" ], "_cc_vuln": { "source_id": "coinkite-mk3-advisory", "original_url": "https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/", "observed_at": "2026-07-31T07:30:23Z", "revision_window_start": "2026-07-31T01:56:33Z", "revision_window_end": "2026-07-31T07:30:23Z", "classification": "source-content", "inherited_from_wayback": true, "baseline_inherited_from_wayback": true, "added_lines": 56, "removed_lines": 19 } } ] }