Bitcoin Core developers claim to have reproduced the COLDCARD MK3 vulnerability, MK2/MK3 devices may be affected

Bitcoin News posted on the X platform that Bitcoin Core developer instagibbs stated that he successfully reproduced the reported COLDCARD vulnerability on a newly initialized COLDCARD MK3 device, using only the number of button presses during the setup process, and said, "Sorry, now is the time to panic."

He believes the issue affects MK2/MK3 devices but stated that it is currently not possible to confirm whether MK4 has a vulnerability. Developer Antoine Poinsot indicated that the key difference is that MK4 uses a hardware random number generator to provide entropy for the seed and actually uses the microcontroller's true random number generator (TRNG), while MK3 does not. The proof of concept and mnemonic verification are still under review.