Bitcoin Core Developer Says COLDCARD MK2 and MK3 Vulnerability Was Reproduced

Bitcoin Core developer instagibbs said he reproduced a reported COLDCARD vulnerability on a newly initialized COLDCARD MK3 device using only the number of button presses during setup. According to Odaily, he said, "Sorry, now is the time to panic," and said the issue may affect MK2 and MK3 devices, while MK4 has not yet been confirmed as vulnerable.Developer Antoine Poinsot said the key difference is that MK4 uses a hardware random number generator to provide entropy for the seed and actually uses the microcontroller’s true random number generator, or TRNG, while MK3 does not. The proof of concept and mnemonic verification are still under review.