digest
Short Summary
Main recommendation: Treat hardware wallets as only as safe as their key generation, and verify that the randomness source actually works before trusting a device with significant Bitcoin. The Coinkite Cold Card, a security-focused air-gapped hardware wallet, was exploited because its seed phrases were generated by a weak random number generator, letting attackers drain over 1,600 Bitcoin (worth about $100 million) from more than 7,000 wallets. Because Bitcoin keys cannot be rotated, affected users could only move funds by generating new seeds and racing attackers to confirm their transactions.
Key Points
- A 12-word seed phrase controls a Bitcoin wallet's private key, so anyone who can reproduce those words can take the funds.
- Cold Card's firmware runs on MicroPython, whose built-in random number generator is designed for simple tasks and is not strong enough for key generation.
- A flag-setting mistake meant Coinkite's custom generator was never used; the built-in generator was silently used instead, a bug that went undetected for about five years.
- On a bare-metal chip with no operating system, the built-in generator faked randomness from a chip serial number and a timer, both predictable, so attackers could enumerate possible keys.
- The attacks began on July 30th and continued over the following weekend and Monday, with the largest wallets targeted first.
- Coinkite's CEO apologized and took full accountability, and the company halted shipments of its remaining inventory, which carried the same broken firmware.
Details Worth Noting
- Concrete instructions: The video gives no step-by-step remediation for users, but its implied actions for affected holders are: generate a brand-new seed phrase on a device or method you trust, then move funds with an on-chain transaction, since firmware updates cannot fix already-generated keys. Because attackers watch the public mempool for transactions from compromised addresses and can outbid with higher fees, the video says the only way to win the race was to send the rescue transaction directly to a mining pool, bypassing the public mempool.
- The video states that a properly generated 128-bit seed phrase is practically unguessable, which is why the randomness source is the critical point of failure.
- The exposure was about half of what it would have been a year earlier, according to the video's comparison, though the exact basis for that figure is not explained.
- The rescue plan relied on trusting a single centralized miner, which the video presents as an ironic cost for a decentralized system.
Bottom Line
The Cold Card incident shows that a hardware wallet's security depends on verifiable randomness during key generation, not on its marketing or design, and that Bitcoin's lack of key rotation makes such failures very costly to recover from.
