security
Coldcard Implements Enhanced Security Measures Following Bitcoin Exploit
Coldcard has released new firmware requiring users to add their own randomness during wallet seed generation and addressed additional security vulnerabilities identified during a comprehensive review.
AS1 NewsSource: decrypt.co
Coldcard, a popular hardware wallet for Bitcoin, has introduced new security features in its latest firmware update. The update mandates that users add their own randomness when generating wallet seeds, aiming to enhance the cryptographic strength of seed creation. This change comes in response to a recent security incident involving a $130 million Bitcoin exploit, which highlighted vulnerabilities in seed generation processes.
The firmware update also addresses several other security issues uncovered during a three-week review conducted by the Coldcard team. These fixes are intended to bolster the device's resilience against potential attacks and improve overall security for users storing significant amounts of Bitcoin.
Coldcard's approach emphasizes user participation in the seed generation process, which is a departure from fully automated methods. By requiring users to contribute entropy, the device aims to reduce the risk of seed compromise through external vulnerabilities or malicious software.
The company has not disclosed specific technical details of the vulnerabilities fixed but emphasizes that these measures are part of ongoing efforts to maintain high security standards in hardware wallets. Users are encouraged to update their devices promptly to benefit from these enhancements.
The firmware update enhances security for Coldcard hardware wallets, potentially reducing the risk of seed compromise and related exploits.