Mk4 and Mk5 firmware history

cc-history-mk

https://raw.githubusercontent.com/Coldcard/firmware/master/releases/History-Mk.md

Organisation

Coinkite

Evidence role

Repository file

Published

continuously updated

Source changes

0

Detected differences

0

Unreviewed

0

Copies held

1

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked 2 Aug 2026, 00:57 UTC.

1. Earliest copy held Current
   seen 1 Aug 2026, 00:17 UTC · Captured here text sha256 5581f53f0f8490caec49563a 40,572 chars
   Extracted text as captured

   *See ChangeLog.md for more recent changes, these are historic versions*
   ## 5.5.1 - 2026-07-01
   - Enhancement: Can export WIF Store watch-only descriptor.
   - Enhancement: WIF Store address detection without the need
     for `PSBT_IN_BIP32_DERIVATION` (improves Electrum support)
   - Enhancement: BIP-322 Proof of Reserves and Message Signing PSBT
     requires `PSBT_GLOBAL_GENERIC_SIGNED_MESSAGE` field
     (read more [BIP-322 Proof of Reserves documentation](../docs/proof-of-reserves-bip-322.md) )
   - Bugfix: Fixes legacy input amount spoofing by rejecting witness-utxo-only
     PSBT inputs when Coldcard is expected to sign a non-segwit input.  When both
     UTXO fields are present the full `non_witness_utxo` is now preferred for
     amount/script lookup. Thanks, @Damir!
   - Bugfix: Keep NFC export tag alive for repeated probes. Helps NFC tap reliability on iOS.
   - Bugfix: Emit warning and do not calculate fee for legacy UTXOs with only witness utxo.
   - Bugfix: Disable Virtual Disk and NFC before activating HSM.
   - Bugfix: P2PK signing was broken. Now supports both compressed and uncompressed P2PK spend.
   - Bugfix: Custom address default menu position was wrong.
   - Bugfix: Delta Mode Trick PIN was never restored from backup.
   - Bugfix: Proper error message for incorrect 7z headers.
   - Bugfix: Exiting nickname entry with nickname already saved deleted previous nickname.
   - Bugfix: Incorrect error message caused by error in Verify/Decrypt Backup.
   - Bugfix: NFC Verify Address raised incorrect error message.
   - Bugfix: CCC key C challenge handled bad BIP-39 checksum by crashing the UX. Now treated
     as a wrong attempt (counts toward 3-strike lockout).
   - Bugfix: CCC magnitude reset from CANCEL on empty input.
   - Bugfix: `OP_RETURN` in CCC with whitelist enabled caused Yikes.
   - Bugfix: TX Explorer crashed on foreign input with non-standard sighash.
   - Bugfix: Malformed JSON message-sign request crashed signing UX.
   - Bugfix: Reject UI-control bytes in JSON / QR text message-signing.
   - Bugfix: Non-standard `OP_RETURN` outputs shown as "null-data", hiding part of the script.
   - Bugfix: Over-limit CCC address-whitelist import was rejected but still modified the policy.
   - Bugfix: Deleting a file right after renaming it (List Files) blanked the old name,
     leaving the renamed file.
   - Bugfix: Reordered `multi(...)` multisig with same keys was misreported as name-only
     change. Now blocked as duplicate.
   - Bugfix: Max WIF store capacity limit was ignored if saving via QR WIF visualization.
   - Bugfix: Force Seed XOR restore from Temporary Seed menu to remain temporary even when
     master seed is blank.
   - Bugfix: Binary signed-transaction (.txn) failed in NFC/QR file share.
   - Bugfix: Yikes in transaction explorer for goto index for tx with only one output.

   Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.