Bitcoin News said in a post on X that several Coldcard functions may still be vulnerable because of a flaw in the Yasmarang pseudo-random number generator, even when the seed phrase itself remains secure. The post said mnemonic phrases generated by rolling dice enough times, or seed phrases imported from an existing source, are still safe on their own. The issue instead affects other secrets created through the device’s flawed randomness. Functions named in the post include paper wallets, device cloning, USB sessions, Secret Teleport, multisig keys, the password generator, and HSM mode. The warning suggests that protecting a mnemonic phrase through manual dice rolls does not fully shield every feature on the hardware wallet if those features depend on the affected random number generator.
Bitcoin News said in a post on X that several Coldcard functions may be vulnerable because of a flaw in the Yasmarang pseudo-random number generator.
According to the post, the risk does not fully disappear even if a mnemonic phrase was generated by rolling dice or imported from an existing seed phrase. If the mnemonic was imported or produced through a sufficient number of dice rolls, the seed phrase itself remains safe.
Functions listed as potentially affected
- Paper wallets
- Device cloning
- USB sessions
- Secret Teleport
- Multisig keys
- Password generator
- HSM mode
The post added that using those functions could still expose secret material generated by the flawed random number generator.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
