Dear Customer, As an official Coinkite reseller, we are writing to inform you of an important security advisory published on July 30, 2026 regarding COLDCARD wallets. WHAT HAPPENED? A software bug prevented the hardware random number generator (TRNG) from properly contributing to seed generation on certain firmware versions. Seeds generated on an affected device are significantly weaker than intended and could, in theory, be recovered by an attacker. WHAT SHOULD YOU DO? ► If your seed was generated on a Mk3 (firmware 4.0.1 or later): Treat your seed as at risk. Follow the dedicated Mk3 Security Advisory on the Coinkite blog and migrate your funds to a new wallet. Proceed calmly, verify every step, and send a small test transaction first. ► If your seed was generated on a Mk4, Mk5, or Q: 1. Update the firmware BEFORE generating any new seed: version 5.6.0 or later (Mk4/Mk5) or 1.5.0Q or later (Q) — https://coldcard.com/docs/upgrade/ 2. Generate a completely new seed on the updated device. 3. Coinkite recommends adding a strong, unique BIP-39 passphrase, and/or at least 99 rolls of a fair six-sided die. 4. Back up the new seed and passphrase carefully, storing them separately. 5. Power-cycle the device and verify the wallet fingerprint and a receive address. 6. Send a small test transaction before moving the rest of your funds. IMPORTANT: Updating the firmware does NOT repair a seed that was already created with affected firmware. You must generate a new seed and migrate your funds. A note on passphrases: every passphrase (including one with a typo) creates a different, valid wallet. Always verify the wallet fingerprint before depositing funds, and remember that losing the passphrase means losing access to the funds. DEVICES NOT AFFECTED: TAPSIGNER, OPENDIME, and SATSCARD are not affected (different codebases). If you have just received a device from us, please update the firmware before creating any seed. Full technical details: https://blog.coinkite.com/entropy-technical-backgrounder/ We remain available for any questions. Best regards, Your Coinkite Reseller https://x.com/coldcardwallet/status/2083081854597374168?s=61&t=5_24eaFZLLSdSjRzL619GQ https://x.com/coldcardwallet/status/2083081854597374168?s=61&t=5_24eaFZLLSdSjRzL619GQ

There is no service that a monopolistic public entity can offer better than the free market. Even is the defense / protection field.

With a MK3 or below if you didn't add a bip39 passphrase or randomly generated the seedphrase through dice rolls or else, you have no security and your funds are already lost or will be soon enough. For MK4 / 5 / or Q the entropy seems better so you may have time to change your setup but again without a passphrase or a randomly generated seedphrase by "analogic" ways you are at risk in the middle / long run. If you have a strong passphrase or used at least 100 dice rolls or equivalent to create the randomness your are ok whatever device you have.

Imagine that freedom at the whole humanity scale. Imagine a world with no tyrant and only civilized people since the beginning of minkind. I often think about that, and how far we would already be. The "unseen" is unimaginable IMO

Didn’t know you were with the webmaster in his anti amber (friendly) cruisade lol The world is working upside down these days 🙃

You have to create a gmail account first, which is way harder and humiliating than downloading Amber and generating an nsec. Then google tracks you activity forever isn’t that bad according to you ?

Karl Marx and JM Keynes are walking in a forest when they come across a pile of shit...

Wow wasn’t even aware for what a shame. Will have to find a solution to migrate Bitcoin Bazar’s node quickly I guess… Thanks for the warning