Luke Dashjr Publishes Nine Coldcard RNG Concerns
- Published
- Updated
Luke Dashjr publicly listed nine concerns about Coldcard’s random-number generation after saying he had already raised them privately with Coinkite. The discussion also points to later firmware changes, including seed-error checks and a startup test for the hardware RNG.
Key claims & sources
What it means
Coldcard is a Bitcoin hardware wallet, and RNG quality matters because it affects how seed material is generated and checked. Luke Dashjr, a Bitcoin Core developer, put the issue back into public view after saying he had already taken it to Coinkite privately. The timing places the debate around a July code revision and later firmware changes, which shows this is about wallet internals rather than a surface-level UI issue.
For people using or building with Coldcard, the practical point is that wallet software can add checks around randomness rather than leaving users to trust the device blindly. Seed-error checks and a startup test for the hardware RNG are the kinds of additions that change how the device handles entropy at boot and during setup. Builders and users now have a clearer signal that the randomness pipeline is an area that can be inspected and modified, not treated as opaque.
The larger stake is the trade-off between hardware-wallet trust and verifiability. Bitcoin self-custody depends on devices generating unpredictable keys, but that same design invites scrutiny of whether the device is doing that correctly. A public nine-point critique also shows how security work can move between private disclosure and public debate, with reputations and trust in a wallet brand hanging on the details.
Still unknown is which of the nine concerns were accepted, disputed, or fully resolved by Coinkite. The material points to later firmware changes, but it does not say exactly when those changes were released or whether they address every issue in Dashjr’s list. The open question is whether the July revision and the newer checks are enough to settle the randomness concerns in a way users can verify.
Market reaction i
The total crypto market barely moved in the 4 hours after the first headline, after falling 0.3% in the 2 hours before.
33 prices, one every 30 minutes · The move was larger before the first headline than after: an observation, not an explanation. The market also moves on things nobody publishes.
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.