COLDCARD RNG incident the public record, collected and explained
Informational only, and this site never asks for your seed words. details

Informational only. This is an open source collection of what others have published about the incident, together with an explanation of it. It is not financial, security or legal advice, and not a substitute for professional advice about your own situation. It is not affiliated with, endorsed by, or speaking for Coinkite. Material is attributed and quoted as published; where sources disagree their scenarios are kept separate with their assumptions rather than reconciled into one answer. Everything is meant to be checked against the linked evidence rather than taken on trust. Act on your own judgement about a particular situation. Editorial standards and corrections.

Do not disclose recovery material to a website, form, message or support account. This site never asks for it, and contributions containing recovery words or private keys are not accepted.

r/Bitcoin: auditing cold-wallet code with AI instead of relying on dice entropy

reddit-audit-cold-wallets-ai

https://www.reddit.com/r/Bitcoin/comments/1vhsp5a/audit_of_cold_wallets/

Latest reviewed change

source content difference between and

The thread gained a comment describing COLDCARD firmware reproducible builds and another comment suggesting wallets with two independent randomness sources.

seen +20 -0 full history below
 Reddit have some auto translation at least if you google something in some language and it will give result in that language, im not sure if it can be activated somehow so it does it without google too.
 
 [See this current post were are in](https://www.reddit.com/r/Bitcoin/comments/1vhsp5a/audit_of_cold_wallets/?tl=es-419), but I added ES to the url
+
+comment: p2v6avf
+parent: t1_p27s42w
+author: JumpProfessional3372
+created_utc: 1786380148

First lines only. The complete diff is in the timeline below.

Organisation
reddit
Evidence role
Community discussion
Published
not established
Source changes
1
Detected differences
1
Unreviewed
0
Copies held
2

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked .

  1. source content difference between and Current source content +20 -0

    The thread gained a comment describing COLDCARD firmware reproducible builds and another comment suggesting wallets with two independent randomness sources.

    seen · Captured here 6,206 chars
    What changed from the previous capture 20 lines
     Reddit have some auto translation at least if you google something in some language and it will give result in that language, im not sure if it can be activated somehow so it does it without google too.
     
     [See this current post were are in](https://www.reddit.com/r/Bitcoin/comments/1vhsp5a/audit_of_cold_wallets/?tl=es-419), but I added ES to the url
    +
    +comment: p2v6avf
    +parent: t1_p27s42w
    +author: JumpProfessional3372
    +created_utc: 1786380148
    +edited: false
    +body:
    +With Coldcard you can pull the firmware code, compile the firmware update file and check that the bytes matches the one from the vendor (signed by them). I remember I did 2 years ago with the 5.2.2 firmware before flashing it.
    +
    +But I can't remember if i followed the process they put in their github to do this (Reproducible builds section) or a custom way of doing it. 
    +
    +[https://github.com/Coldcard/firmware](https://github.com/Coldcard/firmware)
    +
    +comment: p2vd2p6
    +parent: t3_1vhsp5a
    +author: No-Wrap3568
    +created_utc: 1786381852
    +edited: false
    +body:
    +Wallet with Two independent sources of randomness could be an answer to this
    
    Extracted text as captured
    post: 1vhsp5a
    author: LittleWiseGuy3
    created_utc: 1786083745
    title: audit of cold wallets
    body:
    After all the trouble with Coldcard, all bitcoiners are very paranoid. I have seen many posts about generating your own entropy with dice and creating an air-gapped multisig and many other things.
    
    But I think it is easier to audit the cold wallet you are using. If they are open source, today it is very easy with any AI to review the code and look for vulnerabilities of this kind or any other that could compromise your funds remotely.
    
    Also, a good passphrase will protect you from most types of remote attacks.
    
    And this way you make sure your funds are safe without becoming paranoid and making a million dice rolls.
    
    It is just my opinion
    
    comment: p27rc5h
    parent: t3_1vhsp5a
    author: Javanaut018
    created_utc: 1786084059
    edited: false
    body:
    Just go ahead
    
    comment: p27s0yr
    parent: t3_1vhsp5a
    author: CBpegasus
    created_utc: 1786084375
    edited: false
    body:
    CoinKite claim they used AI to audit the code and it didn't find anything. I can believe that because LLMs sometimes fall to the same pitfalls humans do - seeing something that "looks correct" and and assuming it is correct. And the code "looked correct", especially with the reassuring comment on the fatal #define (LLMs often treat comments as factual if not explicitly told otherwise). That's why I'm not sure of the circulating claim that the vulnerability was found by AI btw. I think the hackers did a slightly more advanced (and more traditional) audit than just feeding the code to AI and telling it "find bug".
    
    Anyway I think if you're not quite experienced in these matters you probably can't do a good enough audit yourself, AI or no. Traditionally the idea with open source is that you know many other people also could have audited the code, but that's not a guarantee either. I think rolling dice for 15 minutes is probably an easier and more effective thing than an AI based audit.
    
    comment: p27s42w
    parent: t3_1vhsp5a
    author: WellThatEscalatez
    created_utc: 1786084412
    edited: false
    body:
    theres no way to prove the open source code is the code on your device..

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  2. Earliest copy held
    seen · Captured here 5,469 chars
    Extracted text as captured
    post: 1vhsp5a
    author: LittleWiseGuy3
    created_utc: 1786083745
    title: audit of cold wallets
    body:
    After all the trouble with Coldcard, all bitcoiners are very paranoid. I have seen many posts about generating your own entropy with dice and creating an air-gapped multisig and many other things.
    
    But I think it is easier to audit the cold wallet you are using. If they are open source, today it is very easy with any AI to review the code and look for vulnerabilities of this kind or any other that could compromise your funds remotely.
    
    Also, a good passphrase will protect you from most types of remote attacks.
    
    And this way you make sure your funds are safe without becoming paranoid and making a million dice rolls.
    
    It is just my opinion
    
    comment: p27rc5h
    parent: t3_1vhsp5a
    author: Javanaut018
    created_utc: 1786084059
    edited: false
    body:
    Just go ahead
    
    comment: p27s0yr
    parent: t3_1vhsp5a
    author: CBpegasus
    created_utc: 1786084375
    edited: false
    body:
    CoinKite claim they used AI to audit the code and it didn't find anything. I can believe that because LLMs sometimes fall to the same pitfalls humans do - seeing something that "looks correct" and and assuming it is correct. And the code "looked correct", especially with the reassuring comment on the fatal #define (LLMs often treat comments as factual if not explicitly told otherwise). That's why I'm not sure of the circulating claim that the vulnerability was found by AI btw. I think the hackers did a slightly more advanced (and more traditional) audit than just feeding the code to AI and telling it "find bug".
    
    Anyway I think if you're not quite experienced in these matters you probably can't do a good enough audit yourself, AI or no. Traditionally the idea with open source is that you know many other people also could have audited the code, but that's not a guarantee either. I think rolling dice for 15 minutes is probably an easier and more effective thing than an AI based audit.
    
    comment: p27s42w
    parent: t3_1vhsp5a
    author: WellThatEscalatez
    created_utc: 1786084412
    edited: false
    body:
    theres no way to prove the open source code is the code on your device..

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

How to check this yourself

The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.

Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.