Skip to content
Back to Guavy Wire
Crypto

COLDCARD Vulnerability Reproduced by Bitcoin Core Developer

Instruments
BTC COL
Share

A COLDCARD MK3 vulnerability has been reproduced by Bitcoin Core developer instagibbs, who used button presses during setup to exploit it.

The issue may affect not only MK3 devices but also their predecessors, the MK2. However, it's still unclear whether the newer MK4 model is vulnerable.

Instagibbs' successful reproduction of the vulnerability prompted him to comment, 'Sorry, now is the time to panic.'

Antoine Poinsot, another developer, provided some context, stating that the key difference between the MK3 and MK4 lies in their random number generation methods. The MK4 uses a hardware random number generator, whereas the MK3 relies on the microcontroller's true random number generator.

More on Crypto

Disclaimer: Guavy is a data and market intelligence provider, not an investment advisor. The information, signals, and market analysis provided by the Guavy API and related services are for informational purposes only and are not intended as financial advice, investment recommendations, or an endorsement of any particular trading strategy. Trading in volatile markets, including cryptocurrency, carries significant risk and may not be suitable for all investors. Past performance is not indicative of future results. Users should consult with a qualified financial professional before making any investment decisions. Guavy makes no guarantee of trading profits or financial returns.

Real-time market sentiment intelligence for apps, funds & agents

Location

729 55 Ave SW
Calgary AB T2V 0G4
Canada

© 2026 Guavy Inc