Bitcoin News shared on X a technical analysis by @KLoaec finding that some vulnerable Coldcard Mk3 wallets may derive from only ~4.5 million RNG starting states, searchable in about 3 seconds on a single RTX 4090. Even with extra per-wallet uncertainty, an attacker could finish the search on a high-end GPU in ~50 minutes. The flaw could cause different devices to generate identical mnemonics; assuming 30,000 Mk3 units, roughly 120 pairs may produce the same random stream.
Bitcoin News flagged a new technical analysis by @KLoaec on X, showing that some vulnerable Coldcard Mk3 wallets may be generated from only around 4.5 million random number generator starting states. On a single RTX 4090, those possibilities can be searched in roughly 3 seconds.
The analysis also notes that even accounting for extra uncertainty in how each wallet is generated, an attacker could complete the search on a single high-end GPU in about 50 minutes. More seriously, the flaw could result in different devices generating identical mnemonics.
Assuming a set of 30,000 Mk3 devices, the analysis estimates around 120 pairs of devices could generate the same random number stream. That collision estimate is theoretical, but it suggests duplicate mnemonics across different devices may be possible.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
