Kraken CSO:Coldcard gap triggers an independent audit call

Nick Percoco, Chief Security Officer Kraken, stated that the five-year seed generation gap in Coldcard ' s hardware wallet triggered calls for independent audits. This loophole led to the theft of almost $90 million bitcoin from thousands of wallets. Percoco emphasizes that the manufacturer of hardware wallets should not be the only one that validates the production of assistive words and that the production of solids should be independently tested to confirm the random sources used. According to the latest block chain analysis by Galaxy Research, the attackers have stolen more than 1800 BTCs from more than 5,200 potential victims. The Coinkite disclosed that the loophole had started in March 2021 and that the weaker pseudo-random generator had been erroneously deployed as a result of the migration of the solids. The company has suspended all deliveries and destroyed all the equipment affected. The solidware update has been released, and the user is advised to generate a completely new assistive word after the update。