EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Aug 24·5 min read
Critical Coldcard flaw: what happened, who is affected, and what to do
TL;DR
A critical flaw in the Coldcard wallet has been identified, affecting Liana users and multisig setups, prompting urgent security actions. The article provides a technical analysis of the vulnerabilities and recommended responses.
✦ Why It Matters
Review your Coldcard wallet security settings and apply recommended updates immediately.
Key Takeaways
- Assess if your Coldcard wallet was generated after 2021.
- Migrate funds to a new wallet setup immediately.
- Use Taproot for enhanced security in new setups.
- Backup your new wallet descriptor after migration.
How It Works
The Coldcard's vulnerability stems from its reliance on a pseudo-random number generator (PRNG) instead of a true random number generator (TRNG) for seed generation. This flaw allows attackers to predict wallet keys, compromising security.