COLDCARD Migration Warning: A Firmware Update Is Not Enough

Updating COLDCARD firmware cannot repair a seed created with weak randomness. Restoring the same words on another device preserves the vulnerability. Here is what a genuine wallet migration requires.

Share
COLDCARD Migration Warning: A Firmware Update Is Not Enough

Important for every COLDCARD owner

Updating the firmware does not make your existing wallet safe. The vulnerability belongs to the seed that was generated with insufficient randomness. Importing that seed into another device simply moves the same compromised keys.

đź’ˇ
You need a completely new seed and an on-chain transfer to addresses derived from it!

According to Coinkite, a seed generated on fully patched firmware is safe. Yet after a five-year failure in the most fundamental security function of a hardware wallet, generating the replacement seed on a different manufacturer’s device is the more prudent choice.

Do not restore the old words. Do not reuse them with a new passphrase. Create a genuinely independent wallet, verify its receiving address on the new device, send a small test transaction, confirm it, then migrate the remaining funds.