Ledger article on the Coldcard incident and why ledger is still safe

Link: https://www.ledger.com/blog-coldcard-incident

TL;DR
Ledger explains that the recent Coldcard incident was caused by a firmware bug that weakened the randomness used to generate recovery seeds, making some seed phrases predictable to attackers.

Updating the firmware alone is not enough if your wallet was initialized with affected firmware. Users must generate a brand-new seed phrase and move their funds to a new wallet. Reusing the old seed on another device does not fix the issue.
Ledger says this vulnerability is specific to the affected Coldcard firmware and does not affect Ledger devices.

The incident is a reminder that secure seed generation is critical for any hardware wallet, and users should keep firmware up to date and follow good security practices.

submitted by /u/jonathansj
[link] [comments]

from Bitcoin - The Currency of the Internet https://ift.tt/in3T7E9