Kraken’s Chief Security Officer has uncovered a critical flaw in the Coldcard hardware wallet that lingered undetected for five years. The issue centers on the random number generator, a fundamental component for securing cryptographic keys. Auditors confirmed its presence but failed to verify that the generator was actively utilized during operations.
This oversight means the random number generator was essentially dormant, weakening the wallet’s ability to produce truly secure cryptographic processes. Such a gap highlights a broader problem in hardware wallet testing where functional presence is checked without ensuring full integration, creating potential attack vectors.
Coldcard, a widely trusted brand in the crypto community, now faces scrutiny over its testing protocols amid increasing threats to hardware wallet security. The discovery calls attention to the importance of thorough practical audits rather than relying solely on design specifications. This revelation comes as hardware wallets continue to be a primary defense line for crypto holders against hacks and phishing attempts.
Bitcoin prices saw minimal movement following the news, reflecting cautious market sentiment.
