Coldcard firmware update requires affected users to move Bitcoin

Coldcard has released firmware versions 5.6.1 and 1.5.1Q after a three-week security review, while warning that users with affected seed phrases must create new wallets and move their Bitcoin. Summary Firmware 5.6.1 covers Coldcard Mk4 and Mk5, while version 1.5.1Q applies to Q devices. New seed creation now requires key presses, dice rolls, or coin flips supplied by the user. Installing the firmware does not repair seed phrases created under affected versions. Coldcard advised users to verify the signed update before generating a replacement wallet. Coldcard firmware adds mandatory user entropy Coldcard said in an Aug. 20 post that the latest release followed three weeks of review after its July 31 emergency fix, which addressed a flaw in how some versions of its firmware generated wallet seed phrases. The Bitcoin hardware wallet maker released version 5.6.1 for its Mk4 and Mk5 devices and version 1.5.1Q for Coldcard Q. According to the company, the review covered the earlier seed-generation failure and several areas involved in transaction signing, device connections, firmware installation, and random-number checks. 🚨 New COLDCARD firmware is available: 5.6.1 for Mk4/Mk5 and 1.5....