Skip to content
Back to Guavy Wire
Crypto

Bitcoiners Ditch Coldcard in Favor of Dice Throws Amid Low-Entropy Bug

Instruments
BTC
Share

Bitcoin holders are re-evaluating their trust in hardware wallet setups after a catastrophic low-entropy bug was discovered in Coldcard devices.

The bug, linked to publicly observed thefts beginning on July 30, occurs when the device uses MicroPython's Yasmarang PRNG instead of its STM32 'true random number generator' (TRNG) for secure seed phrase generation.

This vulnerability was introduced in firmware version 4.0.1, released in March 2021, and allows attackers to successfully brute-force private keys, stealing over $100 million worth of BTC since then.

A significant number of Coldcard users saved their coins from the exploit by using physical entropy, such as rolling dice, to generate sufficient random numbers for secure seed phrase generation.

More on Crypto

Disclaimer: Guavy is a data and market intelligence provider, not an investment advisor. The information, signals, and market analysis provided by the Guavy API and related services are for informational purposes only and are not intended as financial advice, investment recommendations, or an endorsement of any particular trading strategy. Trading in volatile markets, including cryptocurrency, carries significant risk and may not be suitable for all investors. Past performance is not indicative of future results. Users should consult with a qualified financial professional before making any investment decisions. Guavy makes no guarantee of trading profits or financial returns.

Market sentiment intelligence for apps, funds & agents

Location

729 55 Ave SW
Calgary AB T2V 0G4
Canada

© 2026 Guavy Inc