Coldcard Firmware Update Aims to Strengthen Security After Massive BTC Heist
Coldcard has released a new firmware update for its hardware wallets to enhance their security. The update comes after a recent security vulnerability led to the theft of over $70 million worth of Bitcoin from users' wallets.
The company stated that some recovery phrases created in previous software versions may pose a potential security risk, and advised affected users to create a new recovery phrase and transfer their assets to the new wallet.
The update includes changes to how recovery strings are generated, requiring at least one user-provided source of physical entropy. Users can generate this randomness using keystrokes, dice rolls, or coin tosses, which will be combined with new entropy derived from the device's hardware and secure elements.
In addition to improving the security of recovery string generation, the update also enables real-time and incremental PSBT verification before signing, strengthens security measures for USB connections and firmware updates, and improves the Delta Mode isolation mechanism.