{"id":742425,"date":"2026-08-03T07:25:18","date_gmt":"2026-08-03T04:25:18","guid":{"rendered":"https:\/\/buradabiliyorum.com\/en\/coldcards-5-year-flaw-reveals-hardware-wallet-testing-gap-krakens-security-chief\/"},"modified":"2026-08-03T07:25:18","modified_gmt":"2026-08-03T04:25:18","slug":"coldcards-5-year-flaw-reveals-hardware-wallet-testing-gap-krakens-security-chief","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/coldcards-5-year-flaw-reveals-hardware-wallet-testing-gap-krakens-security-chief\/","title":{"rendered":"Coldcard\u2019s 5-year flaw reveals hardware wallet testing gap: Kraken\u2019s security chief"},"content":{"rendered":"<p style=\"float:right;margin:0 0 10px 15px;width:240px\"><img decoding=\"async\" src=\"https:\/\/s3-images.ctmedia.io\/media\/article-covers\/hi-bitcoin-wallets-btc-wallet-inaccessible.jpg\" alt=\"Coldcard\u2019s 5-year flaw reveals hardware wallet testing gap: Kraken\u2019s security chief\" class=\"type:primaryImage\"><\/p>\n<p>The five-year bug escaped detection because auditors verified that the intended random number generator existed, but not that it was being called. <\/p>\n<p>Coldcard\u2019s five-year seed-generation flaw has exposed a broader weakness in how hardware wallets are independently tested, according to Kraken chief security officer Nick Percoco.&nbsp;<\/p>\n<p>In an X post on Sunday, Percoco <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/c7five\/status\/2083884290442469678?s=20\"><span style=\"text-decoration: underline\">said<\/span><\/a> the incident should be a \u201cwake-up call\u201d for hardware-wallet makers, calling for independent testing to verify that the <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/download-scripts-themes-apps\/\" data-internallinksmanager029f6b8e52c=\"9\" title=\"Download Scripts &amp; Themes &amp; Apps\" target=\"_blank\" rel=\"noopener\">app<\/a>roved source of randomness is the one actually used by production firmware.&nbsp;<\/p>\n<p>\u201cConsumers are asked to trust a manufacturer\u2019s implementation of the single most critical function in the system, with no independent verification that the approved entropy path is the one actually executing,\u201d said Percoco.&nbsp;<\/p>\n<p>Read more<\/p>\n<\/p>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMN63nwsw68G3Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/news\/\" data-internallinksmanager029f6b8e52c=\"2\" title=\"News\" target=\"_blank\" rel=\"noopener\">News<\/a> articles, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/buradabiliyorum.com\/en\/category\/general\/\" target=\"_blank\" >General category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/cointelegraph.com\/news\/coldcards-5-year-flaw-reveals-hardware-wallet-testing-gap-krakens-security-chief?utm_source=rss_feed&#038;utm_medium=feed&#038;utm_campaign=rss_partner_inbound\" target=\"_blank\" >Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The five-year bug escaped detection because auditors verified that the intended random number generator existed, but not that it was being called. Coldcard\u2019s five-year seed-generation flaw has exposed a broader weakness in how hardware wallets are independently tested, according to Kraken chief security officer Nick Percoco.&nbsp; In an X post on Sunday, Percoco said the&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[1],"tags":[],"class_list":["post-742425","post","type-post","status-publish","format-standard","hentry","category-general"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/742425","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=742425"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/742425\/revisions"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=742425"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=742425"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=742425"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}