COLDCARD RNG incident the public record, collected and explained
Informational only, and this site never asks for your seed words. details

Informational only. This is an open source collection of what others have published about the incident, together with an explanation of it. It is not financial, security or legal advice, and not a substitute for professional advice about your own situation. It is not affiliated with, endorsed by, or speaking for Coinkite. Material is attributed and quoted as published; where sources disagree their scenarios are kept separate with their assumptions rather than reconciled into one answer. Everything is meant to be checked against the linked evidence rather than taken on trust. Act on your own judgement about a particular situation. Editorial standards and corrections.

Do not disclose recovery material to a website, form, message or support account. This site never asks for it, and contributions containing recovery words or private keys are not accepted.

ChainCatcher on Nunchuk's platform-key statement

chaincatcher-nunchuk-response

https://www.chaincatcher.com/en/article/2279664

Organisation
ChainCatcher
Evidence role
Reporting
Published
not established
Source changes
0
Detected differences
47
Unreviewed
0
Copies held
48

Secondary account of Nunchuk's statement that some platform keys were generated on Coldcard Mk4 devices, that the platform derives independent keys via custom logic rather than using the seeds directly, and that Nunchuk expects attackers could eventually incorporate derived keys. The primary post for this statement has not been located; this capture holds the claim until it is, and should be supplemented or replaced when the primary is found. csbastiat-nunchuk-criticism carries a screenshot of the statement text itself, which corroborates the wording quoted here.

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked .

  1. Earliest copy held
    seen · Captured here 2,441 chars
    Extracted text as captured 
    Scan to download
Home
Flash
Depth
Calendar
Data
Find
BTC $63,089.91 +0.28%
ETH $1,863.75 +0.48%
BNB $583.58 +1.18%
XRP $1.07 +0.40%
SOL $72.94 +0.13%
TRX $0.3259 -0.61%
DOGE $0.0699 +0.59%
ADA $0.1853 +5.21%
BCH $211.49 +1.90%
LINK $8.32 +2.09%
HYPE $52.49 +0.01%
AAVE $91.48 +0.36%
SUI $0.6857 +0.53%
XLM $0.1723 +0.40%
ZEC $479.17 +2.70%
BTC $63,089.91 +0.28%
ETH $1,863.75 +0.48%
BNB $583.58 +1.18%
XRP $1.07 +0.40%
SOL $72.94 +0.13%
TRX $0.3259 -0.61%
DOGE $0.0699 +0.59%
ADA $0.1853 +5.21%
BCH $211.49 +1.90%
LINK $8.32 +2.09%
HYPE $52.49 +0.01%
AAVE $91.48 +0.36%
SUI $0.6857 +0.53%
XLM $0.1723 +0.40%
ZEC $479.17 +2.70%
Home
Article
Flash

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

47 presentation-noise differences. Sidebar, ticker and other page chrome churn that our review classified as not being changes to what the source says.
  • +32 -32 Only text excluded by the tested canonical comparison rules changed (chaincatcher-article); the tracked source content is identical.
  • +36 -36 Only the page's live cryptocurrency ticker values and unrelated news rail changed.
  • +32 -30 Only the page's live cryptocurrency ticker values changed.
  • +30 -32 Only the page's live cryptocurrency ticker values and unrelated news rail changed.
  • +30 -30 Only the page's live cryptocurrency ticker values changed.
  • +30 -30 Only the page's live cryptocurrency price ticker changed.
  • +30 -30 Only the page's live cryptocurrency price ticker changed.
  • +30 -30 Only the page's live cryptocurrency price ticker changed.
  • +30 -30 Only the page's live cryptocurrency price ticker changed.
  • +30 -30 The page changed only its live cryptocurrency price ticker and related market widgets.
  • +30 -30 The page changed only its live cryptocurrency price ticker and related market widgets.
  • +30 -30 The page changed only its live cryptocurrency price ticker and related market widgets.
  • +30 -30 The page changed only its live cryptocurrency price ticker and related market widgets.
  • +30 -30 Only live cryptocurrency price and percentage tickers changed.
  • +30 -30 Only live cryptocurrency price and percentage tickers changed.
  • +30 -30 Only live cryptocurrency price and percentage tickers changed.
  • +32 -32 Only live cryptocurrency price and percentage tickers changed.
  • +34 -34 Live cryptocurrency prices and rotating related-reading cards changed. The Nunchuk response itself did not change.
  • +30 -30 Only the page's live cryptocurrency-price ticker changed. The Nunchuk response itself did not change.
  • +32 -32 Live cryptocurrency prices and rotating related-reading cards changed. The Nunchuk response itself did not change.
  • +32 -32 Live cryptocurrency prices and rotating related-reading cards changed. The Nunchuk response itself did not change.
  • +34 -34 Only the duplicated live cryptocurrency ticker changed; later captures also rotated unrelated related-reading links. The Nunchuk response itself is unchanged.
  • +32 -32 Only the duplicated live cryptocurrency ticker changed; later captures also rotated unrelated related-reading links. The Nunchuk response itself is unchanged.
  • +30 -30 Only the duplicated live cryptocurrency ticker changed; later captures also rotated unrelated related-reading links. The Nunchuk response itself is unchanged.
  • +32 -32 Same chrome churn again: updated price ticker quotes and a rotated Related reading card list. The article text was unchanged.
  • +32 -32 Same chrome churn again: updated price ticker quotes and a rotated Related reading card list. The article text was unchanged.
  • +32 -32 Same chrome churn again: updated price ticker quotes and a rotated Related reading card list. The article text was unchanged.
  • +32 -32 Only the duplicated live cryptocurrency price ticker served updated quotes and the Related reading cards rotated headlines. The Nunchuk article text was unchanged.
  • +30 -30 Only the duplicated live cryptocurrency price ticker in the site header served updated quotes. The Nunchuk article text was unchanged.
  • +36 -37 Only live chrome moved: the duplicated header price tickers served updated quotes, the Related reading flash-news cards rotated to newer headlines, and a footer 'AWS' link disappeared. The Nunchuk article text was unchanged.
  • +36 -36 Only live chrome moved: the duplicated header price tickers served updated quotes, and the Related reading flash-news cards rotated to newer headlines. The Nunchuk article text was unchanged.
  • +36 -34 Only live chrome moved: the duplicated header price tickers served updated quotes, and the Related reading flash-news cards rotated to newer headlines. The article text was unchanged.
  • +30 -32 Only the live price ticker in the site header served updated values (rendered twice), and the rotating Related reading rail swapped two cards for one new headline. The article text was unchanged.
  • +30 -30 Only the live price ticker in the site header served updated values (BTC, ETH and the other listed quotes each showed new prices and 24h changes, rendered twice). The article text was unchanged.
  • +32 -30 Only page chrome changed: the duplicated live cryptocurrency price ticker updated its quotes and a new flash-news item (an ancient-miner 500 BTC transfer headline) entered the rotating sidebar list. The Nunchuk article text was unchanged.
  • +30 -32 Only page chrome changed: the duplicated live cryptocurrency price ticker updated its quotes and one flash-news sidebar item (a BlackRock IBIT transfer headline) dropped off the rotating list. The Nunchuk article text was unchanged.
  • +30 -30 Only the duplicated live cryptocurrency price ticker updated its quotes. The Nunchuk article text was unchanged.
  • +34 -34 Only page chrome changed: the duplicated live cryptocurrency price ticker updated its quotes and the related-reading cards rotated to newer headlines. The Nunchuk article text was unchanged.
  • +36 -34 Only page chrome changed: the duplicated live cryptocurrency price ticker updated its quotes and the related-reading cards rotated to newer headlines. The Nunchuk article text was unchanged.
  • +30 -30 Only the duplicated live cryptocurrency price ticker updated its quotes. The Nunchuk article text was unchanged.
  • +34 -34 Only page chrome changed: the duplicated live cryptocurrency price ticker updated its quotes and the related-reading cards rotated to newer headlines. The Nunchuk article text was unchanged.
  • +32 -34 Only page chrome changed: the duplicated live price ticker updated its quotes and the related-reading cards rotated again. The Nunchuk article text was unchanged.
  • +34 -34 Only page chrome changed: the duplicated live price ticker updated its quotes and the related-reading cards rotated to newer headlines. The Nunchuk article text was unchanged.
  • +34 -30 Only page chrome changed: the duplicated live price ticker updated its quotes and the related-reading cards cycled again. The Nunchuk article text was unchanged.
  • +32 -36 Only page chrome changed: the duplicated live cryptocurrency price ticker updated its quotes and the related-reading cards rotated to newer headlines. The Nunchuk article text was unchanged.
  • +36 -36 Only page chrome changed: the duplicated live cryptocurrency price ticker updated its quotes and the related-reading cards rotated to newer headlines. The Nunchuk article text was unchanged.
  • +36 -34 Only page chrome changed: the duplicated live cryptocurrency price ticker updated its quotes and the rotating related-reading cards cycled to newer headlines. The Nunchuk article text is unchanged.
How to check this yourself

The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.

Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.