Galaxy’s head of research said in a post on X that certain Coldcard single-signature setups face a critical risk. According to the post, any Coldcard singlesig configuration using firmware dated March 17, 2021 or later, without dice rolls and without a passphrase, “will be emptied.” The warning applies unless the wallet seed was imported from another source with high entropy or generated through multiple dice rolls. Based on that assessment, he advised users to stop using Coldcard entirely in those cases. The message also carried a practical takeaway for regular users: move assets out of affected setups rather than continue relying on them. The post did not provide extra technical detail in the excerpt carried by Odaily, but it drew a clear line around the conditions involved, including the firmware date, the lack of passphrase protection, and the absence of dice-based entropy generation.
Galaxy’s head of research said on X that all Coldcard singlesig setups using firmware dated March 17, 2021 or later, with no dice rolls and no passphrase, will be emptied.
He said users should stop using Coldcard entirely unless they imported a high-entropy seed from another source or used multiple dice rolls. For most users, the recommendation was to move assets.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
