A feed of the latest blog posts from major bitcoin and crypto wallet companies and developers, direct from the source. A quick way to stay on top of the latest potential security issues, new products and current deals.
COLDCARD Firmware Update 5.6.2 & 1.5.2Q: Verifiable Seed Mixing; Continued Security Review; and EDGE 6.6.1X/6.6.1QX COLDCARD firmware 5.6.2 for Mk4/Mk5 and 1.5.2Q for Q restore
visibility into the device-generated input used during seed creation and add a
standalone tool for independently checking dice-roll or coin-flip mixing.
The release also includes changes from our continuing review of transaction
validation, USB ...
visibility into the device-generated input used during seed creation and add a
standalone tool for independently checking dice-roll or coin-flip mixing.
The release also includes changes from our continuing review of transaction
validation, USB ...
Doubled referral credits through September 30 After the recent Coldcard security news, a lot of people have been asking their more security-conscious friends and family for advice. If you've already got a solid setup, this is a good moment to help someone you care about get ...
Standard vs. Premium: how to tell which one you need We get some version of this question a lot, should I use Casa’s Premium or Standard plan? Both plans are self-custodial and you hold your keys on either one, with Casa holding a single key. Regardless of paid tier, sovereign ...
COLDCARD + Sparrow: Air-Gapped from First Address to First Signature Sparrow and COLDCARD should have different jobs.
Sparrow runs on the computer, watches the blockchain, tracks wallet history, chooses coins, creates transactions, and broadcasts. In this workflow, COLDCARD holds the signing key, interprets the proposed transaction on its own screen, and ...
Sparrow runs on the computer, watches the blockchain, tracks wallet history, chooses coins, creates transactions, and broadcasts. In this workflow, COLDCARD holds the signing key, interprets the proposed transaction on its own screen, and ...
ELLIPAL - News
COLDCARD Security Update: Seed Generation, Transaction Integrity, and Data Isolation Three weeks ago, we disclosed a firmware bug that caused weakened seed
generation. Attackers regenerated the corresponding private keys offline and
stole funds. The COLDCARD devices themselves were not hacked, remotely
accessed, or taken over. This release reflects three weeks of sustained review
since ...
generation. Attackers regenerated the corresponding private keys offline and
stole funds. The COLDCARD devices themselves were not hacked, remotely
accessed, or taken over. This release reflects three weeks of sustained review
since ...
Casa Mobile Key, YubiKey, and Casa Key: Where Each One Comes From Every key in a multisig vault started as a number nobody should be able to guess through utilizing various sources of entropy. In any multisig vault, regardless of vendor, it’s important to understand how each of those keys are derived ...
What Is Entropy? A Plain-Language Guide to How Your Bitcoin Keys Get Made The Coldcard entropy bug has triggered a lot of Bitcoiners to ask a fundamental question that has been taken for granted. People who have used a single hardware wallet for years are wondering how they can be sure their own ...
How We Built a Reliable AI Pentester How Casa has automated scanning our code for vulnerabilities with frontier LLMs.
Update on Customer Data Retention We want to inform our customers of a change to our data-handling practices in
connection with the security incident disclosed on July 30,
2026.
As many of you know, our standard practice has been to automatically blank
customer records after 120 days, retaining only ...
connection with the security incident disclosed on July 30,
2026.
As many of you know, our standard practice has been to automatically blank
customer records after 120 days, retaining only ...
Adding to the Public Record on Our Ongoing Investigation What Happened, in Simple Terms
There was no intentional weak-entropy fallback. It is important to be precise
about what happened.
Yasmarang was MicroPython’s built-in general-purpose PRNG, introduced upstream
in May 2018. It did not become part of COLDCARD’s seed-generation path until the
libNgU migration in ...
There was no intentional weak-entropy fallback. It is important to be precise
about what happened.
Yasmarang was MicroPython’s built-in general-purpose PRNG, introduced upstream
in May 2018. It did not become part of COLDCARD’s seed-generation path until the
libNgU migration in ...
Update, Sunday. The last three days have been some of the hardest in this company’s history,
and for a lot of the people reading this, they’ve been something much worse.
Money that took years to save, gone. Trust that took years to build, broken.
That ...
and for a lot of the people reading this, they’ve been something much worse.
Money that took years to save, gone. Trust that took years to build, broken.
That ...
Bitcoin Core 29.4 released Bitcoin Core version 29.4 is now available for download. See the release notes for more information about the
bug fixes in this release.
If you have any questions, please stop by the #bitcoin IRC chatroom
(IRC, web) and we’ll do our best ...
bug fixes in this release.
If you have any questions, please stop by the #bitcoin IRC chatroom
(IRC, web) and we’ll do our best ...
Bitcoin Core 30.3 released Bitcoin Core version 30.3 is now available for download. See the release notes for more information about the
bug fixes in this release.
If you have any questions, please stop by the #bitcoin IRC chatroom
(IRC, web) and we’ll do our best ...
bug fixes in this release.
If you have any questions, please stop by the #bitcoin IRC chatroom
(IRC, web) and we’ll do our best ...
Bitcoin Core 31.1 released Bitcoin Core version 31.1 is now available for download. See the release notes for more information about the
bug fixes in this release.
If you have any questions, please stop by the #bitcoin IRC chatroom
(IRC, web) and we’ll do our best ...
bug fixes in this release.
If you have any questions, please stop by the #bitcoin IRC chatroom
(IRC, web) and we’ll do our best ...
ELLIPAL - News
ELLIPAL - News
Private Broadcast May Reveal Sender IP Address in Bitcoin Core 31.0 We have become aware of a privacy bug in the -privatebroadcast feature, newly
introduced in Bitcoin Core 31.0, that may cause the originator’s IP address to be
revealed to the receiving peer under certain network conditions. A fix is
forthcoming and will be ...
introduced in Bitcoin Core 31.0, that may cause the originator’s IP address to be
revealed to the receiving peer under certain network conditions. A fix is
forthcoming and will be ...
NEW SHOW ANNOUNCEMENT: COPENHAGEN We’re pleased to announce an intimate show in Copenhagen, at Rust on September 1st! Where we will be playing 'And The Glass Handed Kites…’ in its entirety.Tickets are on-sale NOW here: https://mew.ffm.to/copenhagen2021.owe
HELSINKI AND OSLO Due to local restrictions still in place we have rescheduled our headline shows in Helsinki and Oslo to January 2022. Tickets for the original dates will remain valid for the new dates: mew.ffm.to/live- January 27: The House of Culture, Helsinki.- ...
Bitcoin Supercycle or nah? Date of writing: 27/05/2021 & Bitcoin price: $39,600 USD/BTC or 1 sat = $0.0004 USD Every now and again I […]
JAPAN 2021 SHOWS CANCELED MEW’s Japan tour originally scheduled on Jan16th – Jan19th is cancelled due to current situation of COVID-19 all over the world.Ticket refunds will be available from the point of purchase.We’re looking forward to returning to Japan and being able to ...
SLP Bitcoin Custody Series Welcome to the Bitcoin Custody Interview Series. Hopefully you will enjoy this as a follow on from my prior Hardware […]




