Skip to content
Back to Guavy Wire
Crypto

Coldcard Entropy Vulnerability Traced to 2021 Firmware Rewrite

Instruments
BTC
Share

Foundation Devices CEO Zach Herbert has shed light on the origin of the Coldcard entropy vulnerability. According to Herbert, the issue appears to have been introduced during a major firmware rewrite in March 2021.

The rewrite replaced the wallet's remaining GPL code with a new cryptographic library and aimed for technical improvements, including the adoption of Bitcoin Core's libsecp256k1 and faster cryptographic implementations.

Herbert emphasized that there is no evidence the vulnerability was caused solely by licensing factors, but it was introduced in the same commit that removed the remaining GPL code dependency, involving 120 files.

More on Crypto

Disclaimer: Guavy is a data and market intelligence provider, not an investment advisor. The information, signals, and market analysis provided by the Guavy API and related services are for informational purposes only and are not intended as financial advice, investment recommendations, or an endorsement of any particular trading strategy. Trading in volatile markets, including cryptocurrency, carries significant risk and may not be suitable for all investors. Past performance is not indicative of future results. Users should consult with a qualified financial professional before making any investment decisions. Guavy makes no guarantee of trading profits or financial returns.

Real-time market sentiment intelligence for apps, funds & agents

Location

729 55 Ave SW
Calgary AB T2V 0G4
Canada

© 2026 Guavy Inc