Coldcard bug forces Bitcoin shift to collaborative custody
- Flawed entropy in Coldcard signers allowed AI-assisted attackers to drain 2,000 Bitcoin across 1,200 wallets.
- Dark Skippy exploits demonstrated how malicious device firmware can leak full seed phrases in just two signatures.
- Developers are abandoning monolithic signers for sandboxed operating systems and distributed multi-signature vaults.
Single-device Bitcoin custody failed in spectacular fashion.
When attackers swept 2,000 Bitcoin from roughly 1,200 Coldcard hardware wallets, the illusion of unshakeable single-device sovereignty shattered overnight. The security breakdown exposed systemic vulnerabilities in how the ecosystem generates keys, writes firmware, and manages operational privacy.
The failure stemmed from basic cryptographic shortcuts. On What Bitcoin Did, Frostsnap cryptographers Lloyd Fournier and Nick Farrow revealed that hardware vendor CoinKite bypassed standard random number generation on Coldcard Mark III signers. Instead of drawing true hardware entropy, the firmware routed randomness through Yasmerang, a non-cryptographic MicroPython algorithm. That choice collapsed seed security from 256 bits down to roughly 20 bits. Attackers using Chinese AI model Kimi K3 scanned open-source repositories, identified the weakened search space, and automated on-chain sweeps across compromised devices.
The vulnerability underscored an even deeper structural threat: rogue firmware. Fournier and Farrow detailed how their proof-of-concept Dark Skippy exploit allows malicious or compromised device code to exfiltrate an entire seed phrase inside transaction signature nonces. It takes just two signatures on a single transaction to leak full private keys. To mitigate hardware vendor risk, the cryptographers argued for collaborative entropy during key generation, where host mobile applications inject verifiable randomness alongside the physical device.
"Blindly trusting a single piece of plastic in a safe is not self-custody."
- Nick Farrow, What Bitcoin Did
That reality check resonated across the developer ecosystem. Three days after Fournier and Farrow detailed the exploit, Arc Labs founder Alex Bergeron joined Marty Bent on TFTC to examine the cultural fallout. Bergeron noted that Bitcoiners long mocked smart contract exploits on competing blockchains, only to discover their own hardware architecture depended on small, overburdened development teams. Relying on an isolated hardware signer makes the user their own single point of failure, particularly during crisis recoveries or physical coercion.
Arc Labs responded by building Arcade Vaults, pushing custody toward distributed threshold schemes instead of solitary hardware signers. Using Taproot scripts, passkeys, and time-locked fallback pathways, the design splits user funds into high-frequency spending accounts and delayed recovery savings vaults. By pairing automated server co-signers with multi-signature rules, the model adopts lessons from Block's Bitkey setup, allowing users to preserve sovereignty without bearing absolute operational risk.
Five days after the initial disclosures, developer Q from Foundation Devices took the critique further on Ungovernable Misfits. Q argued that monolithic firmware architectures are inherently unsafe. Legacy devices like Coldcard bundled up to 50 unisolated features - including calculators, password managers, and key management utilities - into a single executable code block. A vulnerability in any secondary feature jeopardizes the master seed.
To dismantle that single attack surface, Foundation introduced KeyOS version 1.4 beta for its Passport Prime signers. The operating system uses application sandboxing to isolate third-party tools and side-loaded apps from core key storage and signing libraries. The architectural pivot coincides with mounting supply-chain risks, highlighted by a recent logistics breach at a Trezor contractor that exposed over 13,000 customer delivery records to potential home-invasion target lists.
"Air gaps cannot save flawed software."
- Q, Ungovernable Misfits
The convergence of AI code auditing, Dark Skippy vectors, and supply-chain leaks has fundamentally rewritten hardware security expectations. Trusting a single physical vendor is no longer considered adequate risk management. The future of Bitcoin custody belongs to sandboxed operating systems and distributed multi-signature vaults.
Source Intelligence
- Deep dive into what was said in the episodes
The Brief Goes Weekly | THE BITCOIN BRIEF 87 • Aug 26
- Q announced KeyOS version 1.4 beta for Passport Prime, introducing a new launcher, light mode, and third-party app sideloading. Sandboxing isolates these applications, preventing malicious code from accessing the master seed, secrets, or the Bitcoin app.
- Q argues that monolithic hardware wallet architectures are fundamentally flawed. The Cold Card contained up to 50 unisolated features in a single code block, proving that airgaps and Bitcoin-only designs do not guarantee security when code bases lack sandboxing.
- Q revealed that upcoming Passport firmware updates will allow users to uninstall preinstalled applications like 2FA and password vaults. This allows custom configuration of the device's attack surface, including a minimal, QR-only setup without using the Envoy companion app.
- A data breach at a Trezor logistics provider exposed over 13,000 customer records, including physical shipping addresses. Q advises purchasing hardware wallets using PO boxes, business addresses, and paying with cryptocurrency to prevent physical attack risks from shipping leaks.
Also discussed on this episode: (7)
Privacy (2)
- Mark recommends using Dead Hash, a simplified signature verification tool, to validate software downloads. The mobile and desktop application streamlines SHA-256 hash checks, making cryptographic verification accessible for non-technical users.
- Mark recommends Mindenbox for anonymous virtual private and dedicated server hosting. The service preserves user privacy by requiring no personal information and accepting payments exclusively in Bitcoin, Lightning, and Monero.
Models (1)
- Seth and the Cake Wallet team purchased Nvidia DGX Spark hardware to run local, private AI models. Q and Mark note that local deployments are becoming viable alternatives to centralized AI APIs for privacy-conscious developers.
Regulation (1)
- Chainalysis is suing the US government over a $95 million ICE contract awarded to competitor TRM Labs. TRM Labs now holds $128 million in active US contract obligations, dwarfing Chainalysis's lifetime federal contract value.
Lightning (2)
- LND nodes running versions prior to 0.20 were vulnerable to a chain reorg exploit where attackers could publish old, revoked commitment transactions to drain funds. Developer Bastian Teinturier disclosed the vulnerability, which was patched in late February.
- A new cryptographic proposal called Iceberg enables nested threshold multisig protocols for the Lightning Network. This allows institutional nodes to distribute signing keys across multiple servers while appearing as a standard, single-key node to counterparties.
Payments (1)
- Mark integrated the Flint Spark wallet into the Ungovernable BTCPay Server to simplify lightning payment processing. The software supports automatic revenue sweeping to cold storage and auto-swaps to stablecoins to mitigate bitcoin exchange rate volatility.
Marty Bent
#785: You Are Your Own Single Point Of Failure with Alex Bergeron • Aug 24
- Alex Bergeron claims the recent Coldcard vulnerability exploit was a cathartic moment that humbled Bitcoin maximalists. It revealed that Bitcoin’s fundamental infrastructure possessed security exposures similar to those previously criticized in DeFi protocols.
- Alex Bergeron argues that individual self-custody often turns the user into their own most obvious single point of failure. Distributing trust through collaborative custody structures mitigates personal blind spots without requiring users to surrender their sovereign ownership.
- Alex Bergeron highlights Green Address's 2014 model of using a 2-of-2 multi-signature co-signing server to enforce spending limits. This historical framework fell out of favor due to the Bitcoin community's subsequent obsession with entirely trustless solutions.
- Alex Bergeron explains that Arc Labs is expanding beyond the Arc scaling protocol to build Arcade, a smart signer software architecture. Arcade coordinates off-chain transactions and enforces customizable spending policies between clients and servers.
- The Arcade Vault prototype separates funds into a spending account and a savings account using two Taproot trees. Alex Bergeron notes it utilizes a 3-of-3 multi-signature scheme with passkeys, allowing time-locked hardware wallet recovery to prevent single-party theft.
- Marty Bent highlights Block Inc.'s integrated Bitcoin ecosystem, which includes Cash App, Square, and BitKey. Cash App offers zero-fee trading for Bitcoin transactions over $2,000, while BitKey provides a 2-of-3 multi-signature hardware wallet with on-screen verification.
Also discussed on this episode: (6)
Safety (1)
- Alex Bergeron and Marty Bent note that centralized API swap services like Boltz, LMP2P, and Zeus were recently disrupted by AI-driven black-hat attackers. These incidents exposed the structural vulnerability of exposing single public API endpoints to advanced automated probing.
Lightning (1)
- To resolve central API vulnerabilities, Arcade launched Intents, a request-for-quote marketplace protocol for Lightning and stablecoin swaps. Alex Bergeron explains this standardizes contracts, enabling wallets to dynamically query multiple service providers instead of relying on a single API.
Philosophy (1)
- Alex Bergeron describes his financial philosophy as collaborative finance rather than decentralized finance. It uses game theory to align incentives among collaborating parties, ensuring efficient liquidity while providing secure, consensus-backed fallback routes to on-chain funds.
Agents (1)
- Prem AI launched Cyber Scan, an on-premise security agent developed in partnership with Arc Labs and Breeze Tech. Marty Bent explains this tool allows local, continuous monitoring and auditing of code repositories rather than relying on non-deterministic cloud-based LLM audits.
Coding (1)
- Alex Bergeron built the Arcade Vault front-end prototype in four to five days using AI tools. He predicts this rapid shift toward vibe coding will trigger an identity crisis for traditional software developers as non-technical builders execute complex designs.
Health (1)
- Marty Bent notes that CrowdHealth provides a crowdfunded alternative to traditional health insurance, resulting in lower overall costs. For maternal care, members pay the first $3,000 of pregnancy costs, with the remaining balance covered by the crowdfunding community.
Danny Knowles
The Coldcard Disaster: Everything You Need to Know | Lloyd Fournier & Nick Farrow • Aug 21
- Lloyd Fournier ran the Coldcard Mark III attack vector to find that approximately 1,200 wallets were compromised, representing almost 2,000 Bitcoin. At its peak, users stored 2,400 Bitcoin insecurely on these devices.
- Lloyd Fournier explains that CoinKite bypassed the Coldcard's hardware true random number generator, instead mixing entropy with Yasmerang, a non-cryptographic toy algorithm. This restricted the security of Mark III seed generation to the low 20s of bits.
- Although the Coldcard Mark IV improved security by adding timer entropy and secure elements, Lloyd Fournier notes it still funneled randomness through Yasmerang. This restricted the input state to 32 bits, making it technically vulnerable but unprofitable to attack.
- Lloyd Fournier identifies four distinct attackers who swept the compromised Coldcard wallets, leaving unique footprints like fixed fee rates. The primary attacker quickly moved over 1,000 Bitcoin into a single pooled wallet in just a few blocks.
- Lloyd Fournier suspects the Coldcard vulnerability was discovered using Kimi K3, a Chinese AI model, rather than an insider leak. While older models like Claude Opus failed to spot these bugs, newer LLMs can easily parse open-view code.
- Nick Farrow and Lloyd Fournier developed the Dark Skippy attack, which allows compromised firmware to exfiltrate a hardware wallet's entire seed phrase inside a transaction signature's nonce. The attack requires only a single transaction containing two signatures to succeed.
- Nick Farrow explains that FrostSnap addresses hardware vulnerability by having the host phone inject verifiable randomness during key generation. This cooperative process prevents a compromised hardware random number generator from acting as a single point of failure.
- FrostSnap utilizes threshold signatures instead of standard script multi-sig, meaning transactions appear as single-signature inputs on-chain. This protocol preserves user privacy and eliminates the complex coordinate descriptor backups required by traditional multi-sig setups.
- To mitigate home invasion and kidnapping risks, Lloyd Fournier advises storing backup keys with professionals like accountants or lawyers who operate strictly during business hours. This protocol disrupts an attacker's timeline and deters physical coercion.
- Nick Farrow argues that hardware manufacturers should write code in Rust rather than mixing Python and C. Rust eliminates common memory corruption vulnerabilities and buffer overflows that occur when parsing data over USB or serial connections.