EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Aug 7·5 min read
Lines of code. 1,596 BTC gone
TL;DR
A critical vulnerability in the COLDCARD hardware wallet led to the loss of 1,596 BTC, unnoticed for five years. This article details the defect, how attackers exploited it, and preventive measures implemented by OneKey.
✦ Why It Matters
Review your hardware wallet's security features and ensure they include strong entropy checks.
Key Takeaways
- Check your COLDCARD firmware version immediately.
- Move funds if using affected firmware versions.
- Understand the risks of software-generated randomness.
- Review security practices for hardware wallets.
How It Works
COLDCARD wallets generate recovery phrases from a pool of random numbers, which should be unpredictable. However, a firmware change switched from using a dedicated hardware random number generator to a software-based method, which was less secure and predictable.