[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4jmBdYSuIa7o2UNvtvRO_otj3UMBReynma78om3Sq20":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":23,"status":24,"created_at":25,"published_at":26,"article":27,"tags":31,"podcasts":50,"controls":57},"28c7f826-7091-4980-b50a-54ce02045fa0","coldcard-rng-flaw-exposes-88m-bitcoin-loss-from-deterministic-seed-generation","f7741958-2544-4695-a08c-eaea3dacc795","COLDCARD RNG Flaw Exposes $88M Bitcoin Loss from Deterministic Seed Generation","A critical integration error in COLDCARD hardware wallet firmware caused the device to silently fall back to a deterministic software-based random number generator (RNG) instead of the intended hardware RNG, fundamentally breaking the cryptographic security of wallet seed generation. Because the seeds were no longer truly random, attackers could reconstruct them offline by iterating through predictable values — enabling mass theft across thousands of wallets without ever physically accessing the devices. This incident highlights how a single low-level implementation bug in cryptographic infrastructure can have catastrophic, irreversible financial consequences. Hardware wallet users, who often place implicit trust in the device's secure element, had no practical way to detect the flaw themselves. The irreversibility of blockchain transactions means that once funds were stolen, recovery was impossible, making prevention and rapid disclosure the only viable defenses.","**Immediate actions:**\n- Audit all firmware versions in use and apply the vendor's patched firmware update immediately.\n- Migrate funds to a newly generated wallet created on a verified, patched device with a confirmed hardware RNG.\n- Treat any wallet seed generated on an affected firmware version as compromised and rotate it without delay.\n\n**Long-term improvements:**\n- Require cryptographic RNG output to be independently validated during device manufacturing and firmware CI\u002FCD pipelines.\n- Implement a hardware attestation and firmware signing process so users can cryptographically verify firmware integrity before use.\n- Establish a coordinated vulnerability disclosure program with defined SLAs so critical firmware flaws reach users before adversaries can exploit them at scale.\n\n**Detection measures:**\n- Integrate RNG entropy health checks into device boot and key-generation routines that halt operation if entropy thresholds are not met.\n- Monitor blockchain analytics for unusual patterns (e.g., correlated address sweeps) that may indicate systematic seed reconstruction attacks.\n- Subscribe to vendor security advisories and hardware wallet CVE feeds to receive timely notification of newly discovered firmware vulnerabilities.",[12,13,14,15,16,17,18,19,20,21,22],"NIST SP 800-90A – Recommendation for Random Number Generation Using Deterministic RBGs","NIST SP 800-90B – Recommendation for the Entropy Sources Used for Random Bit Generation","NIST CSF DE.CM-4 – Malicious code detection","NIST CSF RS.CO-2 – Incidents are reported consistent with established criteria","CIS Control 2 – Inventory and Control of Software Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 16 – Application Software Security","ISO\u002FIEC 19790 – Security requirements for cryptographic modules","FIPS 140-3 – Security Requirements for Cryptographic Modules (RNG requirements)","NIST SP 800-193 – Platform Firmware Resiliency Guidelines","ITIL Change Management – Emergency change procedures for critical security patches",{},"published","2026-08-02T22:20:24.261662+00:00","2026-08-02T22:20:23.957+00:00",{"id":7,"url":28,"slug":29,"title":30},"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fcoldcard-wallet-rng-flaw-likely-linked-to-88-million-bitcoin-theft\u002F","coldcard-wallet-rng-flaw-likely-linked-to-88-million-bitcoin-theft-b4f28f","COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft",[32,38,44],{"id":33,"name":34,"slug":35,"description":36,"color":37},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":39,"name":40,"slug":41,"description":42,"color":43},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",{"id":45,"name":46,"slug":47,"description":48,"color":49},"f0c2a0af-58aa-4128-87c9-6acd30f2dc48","Supply Chain","supply-chain","Third-party risk, compromised dependencies","#8b5cf6",[51],{"id":52,"date":53,"edition":54,"title":55,"audio_url":56},"4f80bb7f-65b1-4c71-9e56-2bc45783a413","2026-08-03","morning","ThreatNoir Morning Brief — August 3","https:\u002F\u002Fcdn.threatnoir.com\u002Fpodcasts\u002F2026-08-03\u002Fthreatnoir-morning-brief-2026-08-03.mp3",[58,61,65],{"slug":35,"name":59,"problem":60},"Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":62,"name":63,"problem":64},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",{"slug":66,"name":67,"problem":68},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control."]