COLDCARD RNG incident the public record, collected and explained
Informational only, and this site never asks for your seed words. details

Informational only. This is an open source collection of what others have published about the incident, together with an explanation of it. It is not financial, security or legal advice, and not a substitute for professional advice about your own situation. It is not affiliated with, endorsed by, or speaking for Coinkite. Material is attributed and quoted as published; where sources disagree their scenarios are kept separate with their assumptions rather than reconciled into one answer. Everything is meant to be checked against the linked evidence rather than taken on trust. Act on your own judgement about a particular situation. Editorial standards and corrections.

Do not disclose recovery material to a website, form, message or support account. This site never asks for it, and contributions containing recovery words or private keys are not accepted.

r/Bitcoin: buyer of a COLDCARD last week asking whether to throw it away

reddit-bought-last-week

https://www.reddit.com/r/Bitcoin/comments/1veessi/i_got_a_coldcard_last_week_am_i_suppose_to_throw/

Latest reviewed change

source content difference between and

The OP added a reply denying that they are a bot.

seen +8 -0 full history below 
 edited: false
 body:
 I'll burn it to ashes! 
+
+comment: p2qee5y
+parent: t1_p1gnbs7
+author: Girl-Who-Flies
+created_utc: 1786316333

First lines only. The complete diff is in the timeline below.

Organisation
reddit
Evidence role
Community discussion
Published
not established
Source changes
12
Detected differences
12
Unreviewed
0
Copies held
13

Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked .

  1. source content difference between and Current source content +8 -0

    The OP added a reply denying that they are a bot.

    seen · Captured here 22,691 chars
    What changed from the previous capture 8 lines 
     edited: false
 body:
 I'll burn it to ashes! 
+
+comment: p2qee5y
+parent: t1_p1gnbs7
+author: Girl-Who-Flies
+created_utc: 1786316333
+edited: false
+body:
+i m not a bot, i don't how to prove it
    Extracted text as captured 
    post: 1veessi
author: Girl-Who-Flies
created_utc: 1785766818
title: i got a coldcard last week, am i suppose to throw it away?
body:
Sorry for the noob question, i have been using blue wallet for last year or so. I knew going to cold wallet was the next step so i had ordered cold card a month ago but it was stuck in customs so i just got it last week. I Understand its not safe if you already have the funds in cold card but what about generating new wallet?

please be kind, i am new and have been slowly saving in bitcoin

comment: p1gb02y
parent: t3_1veessi
author: Ok-Strategy9
created_utc: 1785766953
edited: false
body:
I hate making blanket statements but if I was u, I wouldn’t do anything with coldcard. Don’t throw it away but don’t use it yet. Learn about firmware first

comment: p1gb9uc
parent: t1_p1gb02y
author: Girl-Who-Flies
created_utc: 1785767026
edited: false
body:
thanks for the tip, i will look into firmwares

comment: p1gbv0a
parent: t3_1veessi
author: Optionbulls
created_utc: 1785767183
edited: false
body:
I’m 99% certain that if you use a 24 word seed with strong passphrase and use the dice rolls for better entropy it’s secure. What am I missing? 

comment: p1gc3t2
parent: t1_p1gbv0a
author: Girl-Who-Flies
created_utc: 1785767248
edited: false
body:
i think so too but i am new to cold wallets so just being safe. Currently my stack is safe in blue wallet and i have been checking every hour for last 4 days

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  2. source content difference between and source content +8 -0

    New top-level comment by Good_Extension_9642: "I'll burn it to ashes!"

    seen · Captured here 22,548 chars
    What changed from the previous capture 8 lines 
     edited: false
 body:
 I don’t know. It sounds stupid as hell. I never used a cold card so I’ve only learnt about it since the hack. Why you wouldn’t just dice roll the heck out of everything by default is beyond me.
+
+comment: p2502ip
+parent: t3_1veessi
+author: Good_Extension_9642
+created_utc: 1786050008
+edited: false
+body:
+I'll burn it to ashes!
    Extracted text as captured 
    post: 1veessi
author: Girl-Who-Flies
created_utc: 1785766818
title: i got a coldcard last week, am i suppose to throw it away?
body:
Sorry for the noob question, i have been using blue wallet for last year or so. I knew going to cold wallet was the next step so i had ordered cold card a month ago but it was stuck in customs so i just got it last week. I Understand its not safe if you already have the funds in cold card but what about generating new wallet?

please be kind, i am new and have been slowly saving in bitcoin

comment: p1gb02y
parent: t3_1veessi
author: Ok-Strategy9
created_utc: 1785766953
edited: false
body:
I hate making blanket statements but if I was u, I wouldn’t do anything with coldcard. Don’t throw it away but don’t use it yet. Learn about firmware first

comment: p1gb9uc
parent: t1_p1gb02y
author: Girl-Who-Flies
created_utc: 1785767026
edited: false
body:
thanks for the tip, i will look into firmwares

comment: p1gbv0a
parent: t3_1veessi
author: Optionbulls
created_utc: 1785767183
edited: false
body:
I’m 99% certain that if you use a 24 word seed with strong passphrase and use the dice rolls for better entropy it’s secure. What am I missing? 

comment: p1gc3t2
parent: t1_p1gbv0a
author: Girl-Who-Flies
created_utc: 1785767248
edited: false
body:
i think so too but i am new to cold wallets so just being safe. Currently my stack is safe in blue wallet and i have been checking every hour for last 4 days

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  3. source content difference between and source content +24 -0

    Three new comments: NoBrosCrypto explaining dice rolls add entropy to seed generation, Bionic_Push asking why this is not default, and NoBrosCrypto replying that they do not know.

    seen · Captured here 22,415 chars
    What changed from the previous capture 24 lines 
     edited: false
 body:
 Just use it as a signing device! Once you put your seed into it though, if you rly don’t trust coldcard, make a new seed phrase
+
+comment: p21gmrs
+parent: t1_p1ha3r3
+author: NoBrosCrypto
+created_utc: 1786016112
+edited: false
+body:
+With cold cards you do dice rolls to increase the randomness of the seed phrase generation. The more rolls the greater the entropy. So 99+ dice rolls will give you 256 bits of entropy for a 24 word seed phrase. Something like Ledger does that max entropy randomness for you without dice rolls. That 256 bits represents 2 to the power of 256 possible permutations (more atoms than in the known universe) for somebody to try to guess.
+
+comment: p21y41n
+parent: t1_p21gmrs
+author: Bionic_Push
+created_utc: 1786021780
+edited: false
+body:
+So why is this not done by default? Does it need a lot of computing power or something like that? 
+
+comment: p223fum
+parent: t1_p21y41n
+author: NoBrosCrypto
+created_utc: 1786023301
+edited: false
+body:
+I don’t know. It sounds stupid as hell. I never used a cold card so I’ve only learnt about it since the hack. Why you wouldn’t just dice roll the heck out of everything by default is beyond me.
    Extracted text as captured 
    post: 1veessi
author: Girl-Who-Flies
created_utc: 1785766818
title: i got a coldcard last week, am i suppose to throw it away?
body:
Sorry for the noob question, i have been using blue wallet for last year or so. I knew going to cold wallet was the next step so i had ordered cold card a month ago but it was stuck in customs so i just got it last week. I Understand its not safe if you already have the funds in cold card but what about generating new wallet?

please be kind, i am new and have been slowly saving in bitcoin

comment: p1gb02y
parent: t3_1veessi
author: Ok-Strategy9
created_utc: 1785766953
edited: false
body:
I hate making blanket statements but if I was u, I wouldn’t do anything with coldcard. Don’t throw it away but don’t use it yet. Learn about firmware first

comment: p1gb9uc
parent: t1_p1gb02y
author: Girl-Who-Flies
created_utc: 1785767026
edited: false
body:
thanks for the tip, i will look into firmwares

comment: p1gbv0a
parent: t3_1veessi
author: Optionbulls
created_utc: 1785767183
edited: false
body:
I’m 99% certain that if you use a 24 word seed with strong passphrase and use the dice rolls for better entropy it’s secure. What am I missing? 

comment: p1gc3t2
parent: t1_p1gbv0a
author: Girl-Who-Flies
created_utc: 1785767248
edited: false
body:
i think so too but i am new to cold wallets so just being safe. Currently my stack is safe in blue wallet and i have been checking every hour for last 4 days

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  4. source content difference between and source content +0 -8

    A comment by DonTheHolder ("Trash that shit bro") no longer appears in the thread; it was deleted on the source.

    seen · Captured here 21,384 chars
    What changed from the previous capture 8 lines 
     Your seed phrase is your wallet basically. Coldcard just signs transactions with your seed.  The issue was 100% just letting Coldcard generate the seed for you. Use the dice roll method to generate your new seed instead and you’ll be fine.   
 Airgapped transaction signing is still super secure. Use it with confidence.   
 That being said, I use a Bitbox02 for convenience. 
-
-comment: p1gn0u0
-parent: t3_1veessi
-author: DonTheHolder
-created_utc: 1785770136
-edited: false
-body:
-Trash that shit bro. 🗑 
 
 comment: p1gnbs7
 parent: t3_1veessi
    Extracted text as captured 
    post: 1veessi
author: Girl-Who-Flies
created_utc: 1785766818
title: i got a coldcard last week, am i suppose to throw it away?
body:
Sorry for the noob question, i have been using blue wallet for last year or so. I knew going to cold wallet was the next step so i had ordered cold card a month ago but it was stuck in customs so i just got it last week. I Understand its not safe if you already have the funds in cold card but what about generating new wallet?

please be kind, i am new and have been slowly saving in bitcoin

comment: p1gb02y
parent: t3_1veessi
author: Ok-Strategy9
created_utc: 1785766953
edited: false
body:
I hate making blanket statements but if I was u, I wouldn’t do anything with coldcard. Don’t throw it away but don’t use it yet. Learn about firmware first

comment: p1gb9uc
parent: t1_p1gb02y
author: Girl-Who-Flies
created_utc: 1785767026
edited: false
body:
thanks for the tip, i will look into firmwares

comment: p1gbv0a
parent: t3_1veessi
author: Optionbulls
created_utc: 1785767183
edited: false
body:
I’m 99% certain that if you use a 24 word seed with strong passphrase and use the dice rolls for better entropy it’s secure. What am I missing? 

comment: p1gc3t2
parent: t1_p1gbv0a
author: Girl-Who-Flies
created_utc: 1785767248
edited: false
body:
i think so too but i am new to cold wallets so just being safe. Currently my stack is safe in blue wallet and i have been checking every hour for last 4 days

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  5. source content difference between and source content +8 -0

    The thread gained advice to use the device only for signing and create a new seed phrase if the owner no longer trusts it.

    seen · Captured here 21,511 chars
    What changed from the previous capture 8 lines 
     Why are you against getting the ETF? Do you hate having a good night sleep or something? 🤣
 
 Unless you're in it for the tech then I apologize but I'm just in it for the price action which the ETF delivers the same and more, as you can right covered calls on your ETFs and generate 1 to 2% every month. That is a massive amount of money that very few asset classes can replicate 🤑🤑😮
+
+comment: p1yf7q3
+parent: t3_1veessi
+author: jake2422
+created_utc: 1785971994
+edited: false
+body:
+Just use it as a signing device! Once you put your seed into it though, if you rly don’t trust coldcard, make a new seed phrase
    Extracted text as captured 
    post: 1veessi
author: Girl-Who-Flies
created_utc: 1785766818
title: i got a coldcard last week, am i suppose to throw it away?
body:
Sorry for the noob question, i have been using blue wallet for last year or so. I knew going to cold wallet was the next step so i had ordered cold card a month ago but it was stuck in customs so i just got it last week. I Understand its not safe if you already have the funds in cold card but what about generating new wallet?

please be kind, i am new and have been slowly saving in bitcoin

comment: p1gb02y
parent: t3_1veessi
author: Ok-Strategy9
created_utc: 1785766953
edited: false
body:
I hate making blanket statements but if I was u, I wouldn’t do anything with coldcard. Don’t throw it away but don’t use it yet. Learn about firmware first

comment: p1gb9uc
parent: t1_p1gb02y
author: Girl-Who-Flies
created_utc: 1785767026
edited: false
body:
thanks for the tip, i will look into firmwares

comment: p1gbv0a
parent: t3_1veessi
author: Optionbulls
created_utc: 1785767183
edited: false
body:
I’m 99% certain that if you use a 24 word seed with strong passphrase and use the dice rolls for better entropy it’s secure. What am I missing? 

comment: p1gc3t2
parent: t1_p1gbv0a
author: Girl-Who-Flies
created_utc: 1785767248
edited: false
body:
i think so too but i am new to cold wallets so just being safe. Currently my stack is safe in blue wallet and i have been checking every hour for last 4 days

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  6. source content difference between and source content +0 -8

    Reddit no longer served a comment advising a firmware update, dice-generated seed phrase and passphrase.

    seen · Captured here 21,285 chars
    What changed from the previous capture 8 lines 
     edited: false
 body:
 Fait toi rembourser. Perte de confiance et achète un Trezor à la place 
-
-comment: p1gi7iv
-parent: t3_1veessi
-author: Expert-Evening9303
-created_utc: 1785768874
-edited: false
-body:
-It's fine. Just make sure you update the firmware, generate your seed phrase with dice rolls, and add a passphrase.
 
 comment: p1gi8fs
 parent: t3_1veessi
    Extracted text as captured 
    post: 1veessi
author: Girl-Who-Flies
created_utc: 1785766818
title: i got a coldcard last week, am i suppose to throw it away?
body:
Sorry for the noob question, i have been using blue wallet for last year or so. I knew going to cold wallet was the next step so i had ordered cold card a month ago but it was stuck in customs so i just got it last week. I Understand its not safe if you already have the funds in cold card but what about generating new wallet?

please be kind, i am new and have been slowly saving in bitcoin

comment: p1gb02y
parent: t3_1veessi
author: Ok-Strategy9
created_utc: 1785766953
edited: false
body:
I hate making blanket statements but if I was u, I wouldn’t do anything with coldcard. Don’t throw it away but don’t use it yet. Learn about firmware first

comment: p1gb9uc
parent: t1_p1gb02y
author: Girl-Who-Flies
created_utc: 1785767026
edited: false
body:
thanks for the tip, i will look into firmwares

comment: p1gbv0a
parent: t3_1veessi
author: Optionbulls
created_utc: 1785767183
edited: false
body:
I’m 99% certain that if you use a 24 word seed with strong passphrase and use the dice rolls for better entropy it’s secure. What am I missing? 

comment: p1gc3t2
parent: t1_p1gbv0a
author: Girl-Who-Flies
created_utc: 1785767248
edited: false
body:
i think so too but i am new to cold wallets so just being safe. Currently my stack is safe in blue wallet and i have been checking every hour for last 4 days

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  7. source content difference between and source content +4 -26

    Several comments were removed or replaced with a deleted-account placeholder, withdrawing advice to generate a seed with dice and criticism of other wallet vendors.

    seen · Captured here 21,509 chars
    What changed from the previous capture 30 lines 
     body:
 This. The bug/weakness has been identified but for psychological reasons I'd get a ledger or a trezor. 
 
-comment: p1gdyye
-parent: t1_p1gc61j
-author: OldHamburger7923
-created_utc: 1785767751
-edited: false
-body:
-No, don't rely on it to make your seed at all. Make your own seed with dice then import it. 
-
 comment: p1ge12a
 parent: t3_1veessi
 author: Emergency-Warthog-56
 
 comment: p1ge8gt
 parent: t1_p1gdbo7
-author: OldHamburger7923
+author: [deleted]
 created_utc: 1785767822
 edited: false
 body:
-You have no clue what ledger is doing. They could have backdoor code generating seeds and you wouldn't know till the rug pull. Don't recommend nonsense. Roll your own seed. Don't trust them to do it.
-
-The bigger issue is, if they let a major issue go for five years in critical code, what other code has issues? I was initially thinking the same as you but now I don't think I'd be comfortable with using it anymore.
+[deleted]
 
 comment: p1gei7t
 parent: t1_p1gbv0a
 
 comment: p1gumai
 parent: t1_p1gtro8
-author: OldHamburger7923
+author: [deleted]
 created_utc: 1785772095
 edited: false
 body:
-When I made my new wallet I loaded it into my old nano s and my new jade plus. I can see the same addresses in both after entering my passphrase. 
-
-I don't trust any of them further than I can throw them.
+[deleted]
 
 comment: p1gvwja
 parent: t3_1veessi
 edited: false
 body:
 Customs saved your bacon. Return that POS and use anything else, or keep your btc on coinbase. 
-
-comment: p1gygkc
-parent: t1_p1gw1kc
-author: OldHamburger7923
-created_utc: 1785773076
-edited: false
-body:
-Your previous post was spot on - we don't know what ledger is doing. They could be transferring our seed to their backend when we use their desktop client. 
-
-If their secure element really prevented the seed from ever leaving the device, then that would have made people feel a lot more secure, but its all smoke and mirrors. They plainly told us its not only possible, but they'll charge you to export your seed into the cloud. The exact opposite of what anyone with half a brain would want.
 
 comment: p1h0zjl
 parent: t1_p1gei7t
    Extracted text as captured 
    post: 1veessi
author: Girl-Who-Flies
created_utc: 1785766818
title: i got a coldcard last week, am i suppose to throw it away?
body:
Sorry for the noob question, i have been using blue wallet for last year or so. I knew going to cold wallet was the next step so i had ordered cold card a month ago but it was stuck in customs so i just got it last week. I Understand its not safe if you already have the funds in cold card but what about generating new wallet?

please be kind, i am new and have been slowly saving in bitcoin

comment: p1gb02y
parent: t3_1veessi
author: Ok-Strategy9
created_utc: 1785766953
edited: false
body:
I hate making blanket statements but if I was u, I wouldn’t do anything with coldcard. Don’t throw it away but don’t use it yet. Learn about firmware first

comment: p1gb9uc
parent: t1_p1gb02y
author: Girl-Who-Flies
created_utc: 1785767026
edited: false
body:
thanks for the tip, i will look into firmwares

comment: p1gbv0a
parent: t3_1veessi
author: Optionbulls
created_utc: 1785767183
edited: false
body:
I’m 99% certain that if you use a 24 word seed with strong passphrase and use the dice rolls for better entropy it’s secure. What am I missing? 

comment: p1gc3t2
parent: t1_p1gbv0a
author: Girl-Who-Flies
created_utc: 1785767248
edited: false
body:
i think so too but i am new to cold wallets so just being safe. Currently my stack is safe in blue wallet and i have been checking every hour for last 4 days

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  8. source content difference between and source content +0 -16

    The thread no longer served two earlier comments that duplicated nearby discussion.

    seen · Captured here 22,923 chars
    What changed from the previous capture 16 lines 
     body:
 Keep it and receipts. Maybe you can get it on the lawsuit later.
 
-comment: p1kkdvc
-parent: t3_1veessi
-author: thelongestusernameee
-created_utc: 1785809555
-edited: false
-body:
-Keep it and receipts. Maybe you can get it on the lawsuit later.
-
 comment: p1kklji
 parent: t1_p1gqfba
 author: thelongestusernameee
 created_utc: 1785809627
-edited: false
-body:
-The shark is well fed and happy now :D
-
-comment: p1kkn1g
-parent: t1_p1gqfba
-author: thelongestusernameee
-created_utc: 1785809640
 edited: false
 body:
 The shark is well fed and happy now :D
    Extracted text as captured 
    post: 1veessi
author: Girl-Who-Flies
created_utc: 1785766818
title: i got a coldcard last week, am i suppose to throw it away?
body:
Sorry for the noob question, i have been using blue wallet for last year or so. I knew going to cold wallet was the next step so i had ordered cold card a month ago but it was stuck in customs so i just got it last week. I Understand its not safe if you already have the funds in cold card but what about generating new wallet?

please be kind, i am new and have been slowly saving in bitcoin

comment: p1gb02y
parent: t3_1veessi
author: Ok-Strategy9
created_utc: 1785766953
edited: false
body:
I hate making blanket statements but if I was u, I wouldn’t do anything with coldcard. Don’t throw it away but don’t use it yet. Learn about firmware first

comment: p1gb9uc
parent: t1_p1gb02y
author: Girl-Who-Flies
created_utc: 1785767026
edited: false
body:
thanks for the tip, i will look into firmwares

comment: p1gbv0a
parent: t3_1veessi
author: Optionbulls
created_utc: 1785767183
edited: false
body:
I’m 99% certain that if you use a 24 word seed with strong passphrase and use the dice rolls for better entropy it’s secure. What am I missing? 

comment: p1gc3t2
parent: t1_p1gbv0a
author: Girl-Who-Flies
created_utc: 1785767248
edited: false
body:
i think so too but i am new to cold wallets so just being safe. Currently my stack is safe in blue wallet and i have been checking every hour for last 4 days

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  9. source content difference between and source content +12 -0

    The Reddit thread gained 1 new comment.

    seen · Captured here 23,247 chars
    What changed from the previous capture 12 lines 
     You're actually right. I was under the impression that "hacking" implied remote access and/or code modification. I double checked and it does not. Just figuring out the weak pattern and deriving private keys is enough to be considered hacking. My apologies.
 
 Edit: Back to your original point, sure, Coldcard was hacked, but the hackable flaw was fixed. It's not like being hackable is a permanent state.
+
+comment: p1pme86
+parent: t3_1veessi
+author: DifficultSquash1517
+created_utc: 1785871535
+edited: false
+body:
+No one in this community will be satisfied until everybody's wallets are drained 
+
+Why are you against getting the ETF? Do you hate having a good night sleep or something? 🤣
+
+Unless you're in it for the tech then I apologize but I'm just in it for the price action which the ETF delivers the same and more, as you can right covered calls on your ETFs and generate 1 to 2% every month. That is a massive amount of money that very few asset classes can replicate 🤑🤑😮
    Extracted text as captured 
    post: 1veessi
author: Girl-Who-Flies
created_utc: 1785766818
title: i got a coldcard last week, am i suppose to throw it away?
body:
Sorry for the noob question, i have been using blue wallet for last year or so. I knew going to cold wallet was the next step so i had ordered cold card a month ago but it was stuck in customs so i just got it last week. I Understand its not safe if you already have the funds in cold card but what about generating new wallet?

please be kind, i am new and have been slowly saving in bitcoin

comment: p1gb02y
parent: t3_1veessi
author: Ok-Strategy9
created_utc: 1785766953
edited: false
body:
I hate making blanket statements but if I was u, I wouldn’t do anything with coldcard. Don’t throw it away but don’t use it yet. Learn about firmware first

comment: p1gb9uc
parent: t1_p1gb02y
author: Girl-Who-Flies
created_utc: 1785767026
edited: false
body:
thanks for the tip, i will look into firmwares

comment: p1gbv0a
parent: t3_1veessi
author: Optionbulls
created_utc: 1785767183
edited: false
body:
I’m 99% certain that if you use a 24 word seed with strong passphrase and use the dice rolls for better entropy it’s secure. What am I missing? 

comment: p1gc3t2
parent: t1_p1gbv0a
author: Girl-Who-Flies
created_utc: 1785767248
edited: false
body:
i think so too but i am new to cold wallets so just being safe. Currently my stack is safe in blue wallet and i have been checking every hour for last 4 days

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  10. source content difference between and source content +3 -1

    An existing Reddit comment was edited or removed.

    seen · Captured here 22,669 chars
    What changed from the previous capture 4 lines 
     parent: t1_p1nciwv
 author: riscten
 created_utc: 1785859746
-edited: false
+edited: 1785860383
 body:
 You're actually right. I was under the impression that "hacking" implied remote access and/or code modification. I double checked and it does not. Just figuring out the weak pattern and deriving private keys is enough to be considered hacking. My apologies.
+
+Edit: Back to your original point, sure, Coldcard was hacked, but the hackable flaw was fixed. It's not like being hackable is a permanent state.
    Extracted text as captured 
    post: 1veessi
author: Girl-Who-Flies
created_utc: 1785766818
title: i got a coldcard last week, am i suppose to throw it away?
body:
Sorry for the noob question, i have been using blue wallet for last year or so. I knew going to cold wallet was the next step so i had ordered cold card a month ago but it was stuck in customs so i just got it last week. I Understand its not safe if you already have the funds in cold card but what about generating new wallet?

please be kind, i am new and have been slowly saving in bitcoin

comment: p1gb02y
parent: t3_1veessi
author: Ok-Strategy9
created_utc: 1785766953
edited: false
body:
I hate making blanket statements but if I was u, I wouldn’t do anything with coldcard. Don’t throw it away but don’t use it yet. Learn about firmware first

comment: p1gb9uc
parent: t1_p1gb02y
author: Girl-Who-Flies
created_utc: 1785767026
edited: false
body:
thanks for the tip, i will look into firmwares

comment: p1gbv0a
parent: t3_1veessi
author: Optionbulls
created_utc: 1785767183
edited: false
body:
I’m 99% certain that if you use a 24 word seed with strong passphrase and use the dice rolls for better entropy it’s secure. What am I missing? 

comment: p1gc3t2
parent: t1_p1gbv0a
author: Girl-Who-Flies
created_utc: 1785767248
edited: false
body:
i think so too but i am new to cold wallets so just being safe. Currently my stack is safe in blue wallet and i have been checking every hour for last 4 days

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  11. source content difference between and source content +8 -0

    1 new Reddit comment was posted, by riscten, clarifying that deriving private keys from the weak pattern counts as hacking.

    seen · Captured here 22,517 chars
    What changed from the previous capture 8 lines 
     FYI "stolen because the generated seeds were weak due to Coldcard using a software PRNG." means nothing to most people...
 
 Kinda like leaving your bike unlocked in a dark alley still requires a thief to steal it... The bike itself would be just fine if no thieves came along... Kinda like Coldcard woulda been just fine if no hackers came along... 
+
+comment: p1ob7md
+parent: t1_p1nciwv
+author: riscten
+created_utc: 1785859746
+edited: false
+body:
+You're actually right. I was under the impression that "hacking" implied remote access and/or code modification. I double checked and it does not. Just figuring out the weak pattern and deriving private keys is enough to be considered hacking. My apologies.
    Extracted text as captured 
    post: 1veessi
author: Girl-Who-Flies
created_utc: 1785766818
title: i got a coldcard last week, am i suppose to throw it away?
body:
Sorry for the noob question, i have been using blue wallet for last year or so. I knew going to cold wallet was the next step so i had ordered cold card a month ago but it was stuck in customs so i just got it last week. I Understand its not safe if you already have the funds in cold card but what about generating new wallet?

please be kind, i am new and have been slowly saving in bitcoin

comment: p1gb02y
parent: t3_1veessi
author: Ok-Strategy9
created_utc: 1785766953
edited: false
body:
I hate making blanket statements but if I was u, I wouldn’t do anything with coldcard. Don’t throw it away but don’t use it yet. Learn about firmware first

comment: p1gb9uc
parent: t1_p1gb02y
author: Girl-Who-Flies
created_utc: 1785767026
edited: false
body:
thanks for the tip, i will look into firmwares

comment: p1gbv0a
parent: t3_1veessi
author: Optionbulls
created_utc: 1785767183
edited: false
body:
I’m 99% certain that if you use a 24 word seed with strong passphrase and use the dice rolls for better entropy it’s secure. What am I missing? 

comment: p1gc3t2
parent: t1_p1gbv0a
author: Girl-Who-Flies
created_utc: 1785767248
edited: false
body:
i think so too but i am new to cold wallets so just being safe. Currently my stack is safe in blue wallet and i have been checking every hour for last 4 days

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  12. source content difference between and source content +12 -0

    1 new Reddit comment was posted, including DavidssonA.

    seen · Captured here 22,162 chars
    What changed from the previous capture 12 lines 
     edited: false
 body:
 The details surrounding how this bug happened in the first place don't paint a picture of a company you should trust. They don't seem to take security or software development seriously. Why would you assume such a company only had this one single bug? There could easily be others now, in the past, or in the future.
+
+comment: p1nciwv
+parent: t1_p1ha236
+author: DavidssonA
+created_utc: 1785850585
+edited: false
+body:
+But it took hacking to get it... Didn't it?   
+  
+FYI "stolen because the generated seeds were weak due to Coldcard using a software PRNG." means nothing to most people...
+
+Kinda like leaving your bike unlocked in a dark alley still requires a thief to steal it... The bike itself would be just fine if no thieves came along... Kinda like Coldcard woulda been just fine if no hackers came along...
    Extracted text as captured 
    post: 1veessi
author: Girl-Who-Flies
created_utc: 1785766818
title: i got a coldcard last week, am i suppose to throw it away?
body:
Sorry for the noob question, i have been using blue wallet for last year or so. I knew going to cold wallet was the next step so i had ordered cold card a month ago but it was stuck in customs so i just got it last week. I Understand its not safe if you already have the funds in cold card but what about generating new wallet?

please be kind, i am new and have been slowly saving in bitcoin

comment: p1gb02y
parent: t3_1veessi
author: Ok-Strategy9
created_utc: 1785766953
edited: false
body:
I hate making blanket statements but if I was u, I wouldn’t do anything with coldcard. Don’t throw it away but don’t use it yet. Learn about firmware first

comment: p1gb9uc
parent: t1_p1gb02y
author: Girl-Who-Flies
created_utc: 1785767026
edited: false
body:
thanks for the tip, i will look into firmwares

comment: p1gbv0a
parent: t3_1veessi
author: Optionbulls
created_utc: 1785767183
edited: false
body:
I’m 99% certain that if you use a 24 word seed with strong passphrase and use the dice rolls for better entropy it’s secure. What am I missing? 

comment: p1gc3t2
parent: t1_p1gbv0a
author: Girl-Who-Flies
created_utc: 1785767248
edited: false
body:
i think so too but i am new to cold wallets so just being safe. Currently my stack is safe in blue wallet and i have been checking every hour for last 4 days

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

  13. Earliest copy held
    seen · Captured here 21,663 chars
    Extracted text as captured 
    post: 1veessi
author: Girl-Who-Flies
created_utc: 1785766818
title: i got a coldcard last week, am i suppose to throw it away?
body:
Sorry for the noob question, i have been using blue wallet for last year or so. I knew going to cold wallet was the next step so i had ordered cold card a month ago but it was stuck in customs so i just got it last week. I Understand its not safe if you already have the funds in cold card but what about generating new wallet?

please be kind, i am new and have been slowly saving in bitcoin

comment: p1gb02y
parent: t3_1veessi
author: Ok-Strategy9
created_utc: 1785766953
edited: false
body:
I hate making blanket statements but if I was u, I wouldn’t do anything with coldcard. Don’t throw it away but don’t use it yet. Learn about firmware first

comment: p1gb9uc
parent: t1_p1gb02y
author: Girl-Who-Flies
created_utc: 1785767026
edited: false
body:
thanks for the tip, i will look into firmwares

comment: p1gbv0a
parent: t3_1veessi
author: Optionbulls
created_utc: 1785767183
edited: false
body:
I’m 99% certain that if you use a 24 word seed with strong passphrase and use the dice rolls for better entropy it’s secure. What am I missing? 

comment: p1gc3t2
parent: t1_p1gbv0a
author: Girl-Who-Flies
created_utc: 1785767248
edited: false
body:
i think so too but i am new to cold wallets so just being safe. Currently my stack is safe in blue wallet and i have been checking every hour for last 4 days

    Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.

How to check this yourself

The excerpts and plain unified diffs above show the text this project held and how it changed. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.

Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.