COLDCARD vulnerability what happened, and what to do
Informational only, and this site never asks for your recovery words. details

Informational only. This is independent analysis and an evidence-backed explainer, not financial, security or legal advice, and not a substitute for professional advice about your own situation. It is not affiliated with, endorsed by, or speaking for Coinkite, Block, or any other party named here. Published estimates are attributed, and differing scenarios are kept separate with their assumptions. Act on your own judgement. Editorial standards and corrections.

Do not disclose recovery material to a website, form, message or support account. This site never asks for it. Deliberate recovery on independently verified offline equipment is a separate operation. Seed-word safety.

Coinkite blog index

coinkite-blog-index

https://blog.coinkite.com/

Organisation
Coinkite
Evidence role
Vendor publication index
Published
continuously updated
Source changes
1
Detected differences
1
Unreviewed
0
Copies held
2

Coinkite's publication index, retained to detect additional incident material.

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked 2 Aug 2026, 00:57 UTC.

  1. source content difference between 1 Aug 2026, 00:17 UTC and 1 Aug 2026, 14:02 UTC Current source content +1 -1

    The blog index excerpt for the advisory changed with the advisory itself, from 'Coinkite is warning users who generated a seed using a COLDCARD on firmware versions 4.0.1 throug...' to 'Funds from affected COLDCARD seeds are at risk if the seed lacks 50 independent, private dice rol...'.

    seen 1 Aug 2026, 14:02 UTC · Captured here text sha256 c8b6fe9413350c0c31a20370 8,489 chars
    What changed from the previous capture 2 lines
     Technical Deep Dive into the Entropy Issue
     Jul 30, 2026
     Coldcard Security Advisory
    -Coinkite is warning users who generated a seed using a COLDCARD on firmware versions 4.0.1 throug...
    +Funds from affected COLDCARD seeds are at risk if the seed lacks 50 independent, private dice rol...
     Jul 30, 2026
     One COLDCARD, Many Wallets: Better Backups with BIP-85
     BIP-85 lets one COLDCARD recovery root recreate separate child seeds for compatible wallets. Here...
    
    Extracted text as captured
    Blog
    Careers
    Contact
    RSS
    Email Newsletter
    Store
    ×
    Home
    Blog
    Careers
    Contact
    RSS
    Email Newsletter
    Store
    Stay up to date with our projects
    @COLDCARDwallet
    @SATSCARD
    @TAPSIGNER
    @theBLOCKCLOCK
    @arcasafes
    Video Tutorials
    @Coinkite
    Technical Deep Dive into the Entropy Issue
    Technical Deep Dive into the Entropy Issue
    Jul 30, 2026
    Coldcard Security Advisory
    Funds from affected COLDCARD seeds are at risk if the seed lacks 50 independent, private dice rol...
    Jul 30, 2026
    One COLDCARD, Many Wallets: Better Backups with BIP-85
    BIP-85 lets one COLDCARD recovery root recreate separate child seeds for compatible wallets. Here...
    Jul 29, 2026
    arca Reservations Are Open
    A $99 partial prepayment reserves a place in arca's limited first batch, currently targeting Janu...
    Jul 22, 2026
    Why mempool.space Matters for Bitcoin Users
    How the open-source mempool.space project makes Bitcoin's fee market visible, why self-hosting ma...
    Jul 20, 2026
    Offline Is Not Enough: COLDCARD vs a Disconnected Phone
    Why a disconnected phone or air-gapped computer cannot replace COLDCARD’s dedicated Bitcoin signi...
    Jul 16, 2026

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  2. Earliest copy held
    seen 1 Aug 2026, 00:17 UTC · Captured here text sha256 90133b94768e2e824a99778d 8,489 chars
    Extracted text as captured
    Blog
    Careers
    Contact
    RSS
    Email Newsletter
    Store
    ×
    Home
    Blog
    Careers
    Contact
    RSS
    Email Newsletter
    Store
    Stay up to date with our projects
    @COLDCARDwallet
    @SATSCARD
    @TAPSIGNER
    @theBLOCKCLOCK
    @arcasafes
    Video Tutorials
    @Coinkite
    Technical Deep Dive into the Entropy Issue
    Technical Deep Dive into the Entropy Issue
    Jul 30, 2026
    Coldcard Security Advisory
    Coinkite is warning users who generated a seed using a COLDCARD on firmware versions 4.0.1 throug...
    Jul 30, 2026
    One COLDCARD, Many Wallets: Better Backups with BIP-85
    BIP-85 lets one COLDCARD recovery root recreate separate child seeds for compatible wallets. Here...
    Jul 29, 2026
    arca Reservations Are Open
    A $99 partial prepayment reserves a place in arca's limited first batch, currently targeting Janu...
    Jul 22, 2026
    Why mempool.space Matters for Bitcoin Users
    How the open-source mempool.space project makes Bitcoin's fee market visible, why self-hosting ma...
    Jul 20, 2026
    Offline Is Not Enough: COLDCARD vs a Disconnected Phone
    Why a disconnected phone or air-gapped computer cannot replace COLDCARD’s dedicated Bitcoin signi...
    Jul 16, 2026

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

How to check this yourself

Each copy above is identified by the SHA-256 of its extracted text, shown beside it, and the diffs are plain unified diffs. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.

Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.