COLDCARD RNG incident the public record, collected and explained
Informational only, and this site never asks for your seed words. details

Informational only. This is an open source collection of what others have published about the incident, together with an explanation of it. It is not financial, security or legal advice, and not a substitute for professional advice about your own situation. It is not affiliated with, endorsed by, or speaking for Coinkite. Material is attributed and quoted as published; where sources disagree their scenarios are kept separate with their assumptions rather than reconciled into one answer. Everything is meant to be checked against the linked evidence rather than taken on trust. Act on your own judgement about a particular situation. Editorial standards and corrections.

Do not disclose recovery material to a website, form, message or support account. This site never asks for it, and contributions containing recovery words or private keys are not accepted.

Casa blog index

casa-blog-index

https://blog.casa.io/

Latest reviewed change

source content difference between and

The index gained a new post by Jameson Lopp, relative publication-time labels advanced, and an older post rotated out of the visible list.

seen +10 -11 full history below
 The Coldcard Vulnerability, Explained: Who's at Risk and What to Do Now
 by
 Team Casa
-5 days ago
+7 days ago
 Featured
 Evolving Casa's defenses against social engineering
 by

First lines only. The complete diff is in the timeline below.

Organisation
Casa
Evidence role
Vendor publication index
Published
continuously updated
Source changes
4
Detected differences
16
Unreviewed
0
Copies held
17

Watch page. As of 3 Aug 2026 the newest post is 15 days old and there is no incident post; registered so the appearance of one is captured with timing.

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked .

  1. source content difference between and source content +10 -11

    The index gained a new post by Jameson Lopp, relative publication-time labels advanced, and an older post rotated out of the visible list.

    seen · Captured here 1,487 chars
    What changed from the previous capture 21 lines
     The Coldcard Vulnerability, Explained: Who's at Risk and What to Do Now
     by
     Team Casa
    -5 days ago
    +7 days ago
     Featured
     Evolving Casa's defenses against social engineering
     by
     Team Casa
    -2 months ago
    +3 months ago
     Featured
     A Technically-Fluent Bitcoiner’s Inheritance Story
     by
     by
     John Tinkelenberg
     2 years ago
    +How We Built a Reliable AI Pentester
    +by
    +Jameson Lopp
    +an hour ago
     The Rise of the Machines
     by
     Jameson Lopp
    -3 days ago
    +5 days ago
     The Coldcard Vulnerability, Explained: Who's at Risk and What to Do Now
     by
     Team Casa
    -5 days ago
    +7 days ago
     Bitcoin security
     From Single Point of Failure to Full Sovereignty: A Portfolio Manager’s Story
     by
     Gui
    -25 days ago
    +a month ago
     Bitcoin
     A Social Engineering Story
     by
     Evolving Casa's defenses against social engineering
     by
     Team Casa
    -2 months ago
    +3 months ago
     Bitcoin
     A Technically-Fluent Bitcoiner’s Inheritance Story
     by
     by
     Houston Morgan
     4 months ago
    -Don't Trust Clankers: AI Agents Are Dangerously Helpful
    -by
    -Jameson Lopp
    -4 months ago
    -AI
     Load more
     Older Posts
     Bitcoin
    
    Extracted text as captured
    Bitcoin
    Security
    Product Updates
    Casa Website
    Search
    Sign up
    Log in
    Casa Blog - Bitcoin Security Made Easy
    Featured
    The Coldcard Vulnerability, Explained: Who's at Risk and What to Do Now
    by
    Team Casa
    7 days ago
    Featured
    Evolving Casa's defenses against social engineering
    by
    Team Casa
    3 months ago
    Featured
    A Technically-Fluent Bitcoiner’s Inheritance Story
    by
    Gui
    4 months ago
    Featured
    Key distribution: Tips for making the most of your multisig vault
    by
    Team Casa
    a year ago
    Featured
    The bitcoiner’s guide to physical security
    by
    Jameson Lopp
    a year ago
    Featured
    Coinbase scams: How they work and how you can stop them
    by
    Jameson Lopp
    a year ago
    Featured
    The institutional case for self-custody

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  2. source content difference between and source content +4 -4

    Blog index changed: a new post "The Rise of the Machines" by Jameson Lopp (4 hours ago) appeared, and the older card "The security review every serious bitcoiner should do in 2026" rotated out of the AI category section.

    seen · Captured here 1,511 chars
    What changed from the previous capture 8 lines
     by
     John Tinkelenberg
     2 years ago
    +The Rise of the Machines
    +by
    +Jameson Lopp
    +4 hours ago
     The Coldcard Vulnerability, Explained: Who's at Risk and What to Do Now
     by
     Team Casa
     Jameson Lopp
     4 months ago
     AI
    -The security review every serious bitcoiner should do in 2026
    -by
    -Houston Morgan
    -5 months ago
     Load more
     Older Posts
     Bitcoin
    
    Extracted text as captured
    Bitcoin
    Security
    Product Updates
    Casa Website
    Search
    Sign up
    Log in
    Casa Blog - Bitcoin Security Made Easy
    Featured
    The Coldcard Vulnerability, Explained: Who's at Risk and What to Do Now
    by
    Team Casa
    2 days ago
    Featured
    Evolving Casa's defenses against social engineering
    by
    Team Casa
    2 months ago
    Featured
    A Technically-Fluent Bitcoiner’s Inheritance Story
    by
    Gui
    4 months ago
    Featured
    Key distribution: Tips for making the most of your multisig vault
    by
    Team Casa
    a year ago
    Featured
    The bitcoiner’s guide to physical security
    by
    Jameson Lopp
    a year ago
    Featured
    Coinbase scams: How they work and how you can stop them
    by
    Jameson Lopp
    a year ago
    Featured
    The institutional case for self-custody

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  3. source content difference between and source content +3 -2

    Casa added the Bitcoin security category to its Coldcard vulnerability article in the blog index.

    seen · Captured here 1,553 chars
    What changed from the previous capture 5 lines
     The Coldcard Vulnerability, Explained: Who's at Risk and What to Do Now
     by
     Team Casa
    -6 hours ago
    +7 hours ago
     Featured
     Evolving Casa's defenses against social engineering
     by
     The Coldcard Vulnerability, Explained: Who's at Risk and What to Do Now
     by
     Team Casa
    -6 hours ago
    +7 hours ago
    +Bitcoin security
     From Single Point of Failure to Full Sovereignty: A Portfolio Manager’s Story
     by
     Gui
    
    Extracted text as captured
    Bitcoin
    Security
    Product Updates
    Casa Website
    Search
    Sign up
    Log in
    Casa Blog - Bitcoin Security Made Easy
    Featured
    The Coldcard Vulnerability, Explained: Who's at Risk and What to Do Now
    by
    Team Casa
    7 hours ago
    Featured
    Evolving Casa's defenses against social engineering
    by
    Team Casa
    2 months ago
    Featured
    A Technically-Fluent Bitcoiner’s Inheritance Story
    by
    Gui
    4 months ago
    Featured
    Key distribution: Tips for making the most of your multisig vault
    by
    Team Casa
    a year ago
    Featured
    The bitcoiner’s guide to physical security
    by
    Jameson Lopp
    a year ago
    Featured
    Coinbase scams: How they work and how you can stop them
    by
    Jameson Lopp
    a year ago
    Featured
    The institutional case for self-custody

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  4. source content difference between and source content +6 -7

    Casa added its Coldcard vulnerability explainer to the blog index.

    seen · Captured here 1,438 chars
    What changed from the previous capture 13 lines
     by
     John Tinkelenberg
     2 years ago
    +The Coldcard Vulnerability, Explained: Who's at Risk and What to Do Now
    +by
    +Houston Morgan
    +27 minutes ago
     From Single Point of Failure to Full Sovereignty: A Portfolio Manager’s Story
     by
     Gui
    -19 days ago
    +20 days ago
     Bitcoin
     A Social Engineering Story
     by
     The security review every serious bitcoiner should do in 2026
     by
     Houston Morgan
    -4 months ago
    -Announcing SOC 2 Type II Compliance
    -by
    -Jameson Lopp
    -8 months ago
    -Security
    +5 months ago
     Load more
     Older Posts
     Bitcoin
    
    Extracted text as captured
    Bitcoin
    Security
    Product Updates
    Casa Website
    Search
    Sign up
    Log in
    Casa Blog - Bitcoin Security Made Easy
    Featured
    Evolving Casa's defenses against social engineering
    by
    Team Casa
    2 months ago
    Featured
    A Technically-Fluent Bitcoiner’s Inheritance Story
    by
    Gui
    4 months ago
    Featured
    Key distribution: Tips for making the most of your multisig vault
    by
    Team Casa
    a year ago
    Featured
    The bitcoiner’s guide to physical security
    by
    Jameson Lopp
    a year ago
    Featured
    Coinbase scams: How they work and how you can stop them
    by
    Jameson Lopp
    a year ago
    Featured
    The institutional case for self-custody
    by
    John Tinkelenberg
    2 years ago
    The Coldcard Vulnerability, Explained: Who's at Risk and What to Do Now
    by

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  5. Earliest copy held
    seen · Captured here 1,407 chars
    Extracted text as captured
    Bitcoin
    Security
    Product Updates
    Casa Website
    Search
    Sign up
    Log in
    Casa Blog - Bitcoin Security Made Easy
    Featured
    Evolving Casa's defenses against social engineering
    by
    Team Casa
    2 months ago
    Featured
    A Technically-Fluent Bitcoiner’s Inheritance Story
    by
    Gui
    4 months ago
    Featured
    Key distribution: Tips for making the most of your multisig vault
    by
    Team Casa
    a year ago
    Featured
    The bitcoiner’s guide to physical security
    by
    Jameson Lopp
    a year ago
    Featured
    Coinbase scams: How they work and how you can stop them
    by
    Jameson Lopp
    a year ago
    Featured
    The institutional case for self-custody
    by
    John Tinkelenberg
    2 years ago
    From Single Point of Failure to Full Sovereignty: A Portfolio Manager’s Story
    by

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

12 presentation-noise differences. Sidebar, ticker and other page chrome churn that our review classified as not being changes to what the source says.
  • +4 -4 Only relative-time labels in the blog index rolled forward (7 days to 8 days, an hour to a day, 5 days to 6 days); no post title, author or featured flag changed.
  • +4 -4 Only relative post timestamps on the Casa blog index rolled. No incident post appeared and no article body changed.
  • +1 -1 Relative-time aging only: the Jameson Lopp post went from "4 hours ago" to "6 hours ago". No items added, removed or edited.
  • +3 -3 Live relative-date counters: post age labels rolled over ("a day ago" to "2 days ago", "21 days ago" to "22 days ago"); no posts added or removed.
  • +2 -2 Casa's relative-age labels changed from 21 hours ago to a day ago. No article or incident-watch content changed.
  • +3 -3 Only relative publication-time labels on existing blog cards advanced, from hours or days ago to later relative times. No post title or article content changed.
  • +6 -1 The index changed relative times and repeated the existing Coldcard article in its featured presentation.
  • +1 -1 Only the relative publication time on the existing Coldcard article changed.
  • +2 -2 The blog index changed only its live author and relative-time metadata.
  • +1 -1 Only relative publication-time labels advanced on the blog index.
  • +1 -1 Only relative publication-time labels advanced on the blog index.
  • +2 -2 Only relative date labels on the blog index cards shifted (15 days ago to 19 days ago, 23 days ago to a month ago). No post was added, removed or retitled.
How to check this yourself

The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.

Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.