Bitcoin Core developer says COLDCARD MK3 vulnerability has been reproduced, MK2/MK3 devices may be affected

According to Odaily, Bitcoin News posted on the X platform that Bitcoin Core developer instagibbs stated he successfully reproduced the previously reported COLDCARD vulnerability on a newly initialized COLDCARD MK3 device solely by using the number of button presses during setup, and commented, "Sorry, now is the time to panic."

He believes the issue affects MK2/MK3 devices, but currently cannot confirm whether the MK4 is vulnerable.

Developer Antoine Poinsot stated that the key difference is that the MK4 uses a hardware random number generator to provide entropy for the seed and actually uses the microcontroller's true random number generator (TRNG), which the MK3 does not use.

This proof of concept and mnemonic verification are still under review.