777: Coldcard Is Compromised with James O'Beirne

July 31, 2026

AI Summary

5 min read

On February 27, 2023, the Bitcoin security world was rocked by the discovery of a catastrophic vulnerability in Coldcard hardware wallets—devices long considered the gold standard for self-custody among Bitcoiners. James O'Beirne, a protocol engineer and long-time Coldcard advocate, joined the podcast to explain the flaw, its implications, and why he was spending his night frantically helping people migrate funds.

The core issue is a failure in the random number generator (RNG) used to create private keys on Coldcard devices produced after 2021. Instead of generating truly random entropy—the cryptographic randomness that makes a private key impossible to guess—the RNG was deterministic. This means the search space for an attacker to guess a private key is "highly, highly limited relative to what it should be." For a standard single-signature wallet set up without additional entropy, funds are effectively "dangling in the wind."

The Scope of the Vulnerability

Continue reading the full summary in the app — free to try.

Read Full Summary →

Free • No credit card required

Listen to Audio Summary Open in App

Never miss an episode of TFTC: A Bitcoin Podcast

Get every new episode summarized in your inbox — free, ~5 minutes to read.

No spam. Unsubscribe anytime.

What you'll learn

1 (00:49) **The Coldcard Vulnerability Is Real and Severe** - James O'Beirne and the host break the news of a critical RNG flaw in Coldcard devices produced after 2021.
2 (03:04) **The Problem Persists on Newer Devices** - The investigation is ongoing, and the vulnerability is not limited to older models.
3 (05:24) **Personal Impact and the Fragility of Trust** - Both hosts are personally affected and confront the devastating loss of confidence in a previously trusted brand.
4 (07:49) **AI Uncovers the Flaw: A New Era of Security** - The vulnerability was discovered by an AI, marking a paradigm shift in security auditing and exploitation.
5 (10:02) **Second-Order Effects: A Crisis of Confidence in Self-Custody** - The hosts worry about the broader reputational damage to self-custody itself.
6 (11:46) **An Inexcusable Error in a Hard Domain** - The hosts discuss the nature of the mistake and the history of hardware wallet failures.
7 (13:34) **The Path Forward: Covenants and Simpler Systems** - The conversation turns to the long-term technical solution for better self-custody UX and security.

+ Full timestamped outline available in the app

Show Notes

James O'Beirne joins Marty to break down the critical Coldcard RNG vulnerability affecting devices produced after 2021. They discuss how insufficient entropy generation exposes private keys, why MK2, MK3, MK4, and Q users must migrate funds immediately, and how AI models accelerated the discovery. The conversation covers multisig risks, passphrase limitations, dice roll safety, and the broader collapse of trust in single-vendor hardware wallets. Essential listening for Bitcoin self-custody security.

James on X: https://x.com/jamesob

Find the Home Mining Playbook here: https://www.tftc.io/home-mining-energy-playbook

STACK SATS hat: https://tftcmerch.io/

Our newsletter: https://www.tftc.io/bitcoin-brief/

TFTC Elite (Ad-free & Discord): https://www.tftc.io/#/portal/signup/

Discord: https://discord.gg/yHGkvYxdqT

Opportunity Cost Extension: https://www.opportunitycost.app/

Shoutout to our sponsors:

Block:

Cash App: For a limited time, new customers can get $21 added to their balance. Just use code TFTC10 when you sign up, and send at least $5 to a friend in the first two weeks. Terms apply. Bitcoin services by Block, Inc. See the Bitcoin disclosures at cash.app/legal/podcast.
Square: Visit http://square.com/go/tftc for up to $200 off eligible Square hardware.
Bitkey: Use code TFTC10 for 10% off the new Bitkey.

Aven

https://www.aven.com/bitcoin

CrowdHealth

https://www.joincrowdhealth.com/tftc

Unchained

https://unchained.com/tftc/

Salt of the Earth:

https://drinksote.com/tftc

Join the TFTC Movement:

Main YT Channel

https://www.youtube.com/c/TFTC21/videos

Clips YT Channel