Discussion (4 Comments)Read Original on HackerNews

greyface-•about 3 hours ago

Spot the bug!

  #define MICROPY_HW_ENABLE_RNG (0)
  [...]
  #ifndef MICROPY_HW_ENABLE_RNG
  #error "get a HW TRNG plz"
  #endif

sunshine-o•about 2 hours ago

There must be a fascinated industry dedicated to cracking old, orphan, lost and forgotten accounts with bad seeds and entropy.

wslh•about 3 hours ago

Coldcard Security Advisory: https://blog.coinkite.com/coldcard-mk3-seed-generation-warni...

paulpauper•about 2 hours ago

so there was $70 million just sitting there for five years in the open that anyone could have taken. Nuts.

Enticed by riches, hackers worldwide are now going through all firmware source code , wit the help of the latest AI models, for all wallets to find misconfigurations and other problems. Expect more thefts from low entropy bugs. AI has clearly been shown to be more more adept at auditing code than humans.

Coldcard's $38M (so far) exploit shakes faith in self-custody

⚡ Community Insights

Discussion (4 Comments)Read Original on HackerNews