COLDCARD RNG incident the public record, collected and explained
Informational only, and this site never asks for your seed words. details

Informational only. This is an open source collection of what others have published about the incident, together with an explanation of it. It is not financial, security or legal advice, and not a substitute for professional advice about your own situation. It is not affiliated with, endorsed by, or speaking for Coinkite. Material is attributed and quoted as published; where sources disagree their scenarios are kept separate with their assumptions rather than reconciled into one answer. Everything is meant to be checked against the linked evidence rather than taken on trust. Act on your own judgement about a particular situation. Editorial standards and corrections.

Do not disclose recovery material to a website, form, message or support account. This site never asks for it, and contributions containing recovery words or private keys are not accepted.

COLDCARD firmware downloads

coldcard-downloads

https://coldcard.com/downloads

Latest reviewed change

source content difference between and

The page removed three Telegram references.

seen +0 -3 full history below
 Temporary Seeds
 Get in touch
 X / Twitter
-Telegram
 Support
 Company
 About
 Temporary Seeds

First lines only. The complete diff is in the timeline below.

Organisation
Coinkite
Evidence role
Firmware release index
Published
continuously updated
Source changes
3
Detected differences
3
Unreviewed
0
Copies held
4

Which firmware is actually being offered, and when it appeared.

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked .

  1. source content difference between and Current source content +0 -3

    The page removed three Telegram references.

    seen · Captured here 2,876 chars
    What changed from the previous capture 3 lines
     Temporary Seeds
     Get in touch
     X / Twitter
    -Telegram
     Support
     Company
     About
     Temporary Seeds
     Get in touch
     X / Twitter
    -Telegram
     Support
     Company
     About
     Privacy Policy
     STAY CONNECTED
     @COLDCARDwallet
    -Telegram
     Blog
     Newsletter
     Copyright © 2026 Coinkite Inc.
    
    Extracted text as captured
    COLDCARD Security Advisory
    A seed-generation defect affected releases beginning with firmware 4.0.1. Fixed firmware is available. Existing affected seeds still require migration.
    Check status →
    Search COLDCARD
    Search
    Technology
    NFC Push TX
    Key Teleport
    BBQr
    Trick PINs
    Seed XOR
    BIP-85
    Secure Notes & Passwords
    Encrypted Backups
    Address Explorer
    Multisig
    COLDCARD Co-Signing
    Descriptor Export
    MicroSD 2FA
    Temporary Seeds
    Get in touch
    X / Twitter
    Support
    Company
    About
    Resellers
    Resources
    Security
    FAQ
    Compare Hardware Wallets
    Advanced Topics
    Mk4 Security Model
    Blog
    Newsletter
    More from Coinkite
    OPENDIME
    SEEDPLATE
    BLOCKCLOCK mini
    TAPSIGNER Wallet
    Home

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  2. source content difference between and source content +10 -7

    Coinkite softened the advisory banner, added fixed-release labels to every supported firmware version, and replaced the Read advisory link with a Check status link.

    seen · Captured here 2,903 chars
    What changed from the previous capture 17 lines
     COLDCARD Security Advisory
    -Seeds generated on firmware 4.0.1 (2021 or later) are at risk.
    -Read advisory →
    +A seed-generation defect affected releases beginning with firmware 4.0.1. Fixed firmware is available. Existing affected seeds still require migration.
    +Check status →
     Search COLDCARD
     Search
     Technology
     BLOCKCLOCK mini
     TAPSIGNER Wallet
     Latest Firmware Versions
    +Fixed firmware is available for every supported COLDCARD model.
    +Updating corrects future seed generation but does not repair an existing affected seed.
    +Check current security status →
     COLDCARD Mk5/Mk4
    -Current version: 5.6.0
    +Current version: 5.6.0 Fixed release
     Download 5.6.0
     All files for Mk
     COLDCARD Q
    -Current version: 1.5.0Q
    +Current version: 1.5.0Q Fixed release
     Download 1.5.0Q
     All files for Q
     COLDCARD Mk5/Mk4 (EDGE)
    -Current version: 6.6.0X
    +Current version: 6.6.0X Fixed release
     List files for Mk EDGE
     COLDCARD Q (EDGE)
    -Current version: 6.6.0QX
    +Current version: 6.6.0QX Fixed release
     List files for Q EDGE
     COLDCARD Mk4
     Current version: 5.4.5
     All files for Mk4
     COLDCARD Mk3 and Mk2
    -Current version: 4.2.0
    +Current version: 4.2.0 Fixed release
     All files for Mk3
     COLDCARD Mk1
     Current version: 3.0.6
    
    Extracted text as captured
    COLDCARD Security Advisory
    A seed-generation defect affected releases beginning with firmware 4.0.1. Fixed firmware is available. Existing affected seeds still require migration.
    Check status →
    Search COLDCARD
    Search
    Technology
    NFC Push TX
    Key Teleport
    BBQr
    Trick PINs
    Seed XOR
    BIP-85
    Secure Notes & Passwords
    Encrypted Backups
    Address Explorer
    Multisig
    COLDCARD Co-Signing
    Descriptor Export
    MicroSD 2FA
    Temporary Seeds
    Get in touch
    X / Twitter
    Telegram
    Support
    Company
    About
    Resellers
    Resources
    Security
    FAQ
    Compare Hardware Wallets
    Advanced Topics
    Mk4 Security Model
    Blog
    Newsletter
    More from Coinkite
    OPENDIME
    SEEDPLATE
    BLOCKCLOCK mini
    TAPSIGNER Wallet

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  3. source content difference between and source content +1 -1

    The site-wide advisory banner hardened from 'Seeds generated on firmware 4.0.1 or later may be at risk' to 'Seeds generated on firmware 4.0.1 (2021 or later) are at risk'.

    seen · Captured here 2,561 chars
    What changed from the previous capture 2 lines
     COLDCARD Security Advisory
    -Seeds generated on firmware 4.0.1 or later may be at risk.
    +Seeds generated on firmware 4.0.1 (2021 or later) are at risk.
     Read advisory →
     Search COLDCARD
     Search
    
    Extracted text as captured
    COLDCARD Security Advisory
    Seeds generated on firmware 4.0.1 (2021 or later) are at risk.
    Read advisory →
    Search COLDCARD
    Search
    Technology
    NFC Push TX
    Key Teleport
    BBQr
    Trick PINs
    Seed XOR
    BIP-85
    Secure Notes & Passwords
    Encrypted Backups
    Address Explorer
    Multisig
    COLDCARD Co-Signing
    Descriptor Export
    MicroSD 2FA
    Temporary Seeds
    Get in touch
    X / Twitter
    Telegram
    Support
    Company
    About
    Resellers
    Resources
    Security
    FAQ
    Compare Hardware Wallets
    Advanced Topics
    Mk4 Security Model
    Blog
    Newsletter
    More from Coinkite
    OPENDIME
    SEEDPLATE
    BLOCKCLOCK mini
    TAPSIGNER Wallet

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  4. Earliest copy held
    seen · Captured here 2,557 chars
    Extracted text as captured
    COLDCARD Security Advisory
    Seeds generated on firmware 4.0.1 or later may be at risk.
    Read advisory →
    Search COLDCARD
    Search
    Technology
    NFC Push TX
    Key Teleport
    BBQr
    Trick PINs
    Seed XOR
    BIP-85
    Secure Notes & Passwords
    Encrypted Backups
    Address Explorer
    Multisig
    COLDCARD Co-Signing
    Descriptor Export
    MicroSD 2FA
    Temporary Seeds
    Get in touch
    X / Twitter
    Telegram
    Support
    Company
    About
    Resellers
    Resources
    Security
    FAQ
    Compare Hardware Wallets
    Advanced Topics
    Mk4 Security Model
    Blog
    Newsletter
    More from Coinkite
    OPENDIME
    SEEDPLATE
    BLOCKCLOCK mini
    TAPSIGNER Wallet

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

How to check this yourself

The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.

Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.