777: Coldcard Is Compromised with James O'Beirne

James O'Beirne joins Marty to break down the critical Coldcard RNG vulnerability affecting devices produced after 2021. They discuss how insufficient entropy generation exposes private keys, why MK2, MK3, MK4, and Q users must migrate funds immediately, and how AI models accelerated the discovery. The conversation covers multisig risks, passphrase limitations, dice roll safety, and the broader collapse of trust in single-vendor hardware wallets. Essential listening for Bitcoin self-custody security.

James on X: https://x.com/jamesob

Find the Home Mining Playbook here: https://www.tftc.io/home-mining-energy-playbook

STACK SATS hat: https://tftcmerch.io/

Our newsletter: https://www.tftc.io/bitcoin-brief/

TFTC Elite (Ad-free & Discord): https://www.tftc.io/#/portal/signup/

Discord: https://discord.gg/yHGkvYxdqT

Opportunity Cost Extension: https://www.opportunitycost.app/

Shoutout to our sponsors:

Block:

• Cash App: For a limited time, new customers can get $21 added to their balance. Just use code TFTC10 when you sign up, and send at least $5 to a friend in the first two weeks. Terms apply. Bitcoin services by Block, Inc. See the Bitcoin disclosures at cash.app/legal/podcast.
• Square: Visit http://square.com/go/tftc for up to $200 off eligible Square hardware.
• Bitkey: Use code TFTC10 for 10% off the new Bitkey.

Aven

https://www.aven.com/bitcoin

CrowdHealth

https://www.joincrowdhealth.com/tftc

Unchained

https://unchained.com/tftc/

Salt of the Earth:

https://drinksote.com/tftc

Join the TFTC Movement:

Main YT Channel

https://www.youtube.com/c/TFTC21/videos

Clips YT Channel

https://www.youtube.com/channel/UCUQcW3jxfQfEUS8kqR5pJtQ

Website

https://tftc.io/

Newsletter

tftc.io/bitcoin-brief/

Twitter

https://twitter.com/tftc21

Instagram

https://www.instagram.com/tftc.io/

Nostr

https://primal.net/tftc

Follow Marty Bent:

Twitter

https://twitter.com/martybent

Nostr

https://primal.net/martybent

Newsletter

https://tftc.io/martys-bent/

Podcast

https://www.tftc.io/tag/podcasts/

Disclosure: Bitcoin services are provided by Block, Inc. Bitcoin services are not licensable activity in all U.S. states and territories, and not all services are available in all states. Bitkey is not available in New York. Block, Inc. operates in New York as Block of Delaware and is licensed to engage in virtual currency business activity by the New York State Department of Financial Services. Bitcoin is a non-deposit, non-bank product that is not FDIC insured and involves risk, including monetary loss. For additional information, see the Bitcoin disclosures: https://help.cash.app/btcdisclosures

Get up to $200 off Square hardware when you sign up at http://square.com/go/tftc! #squarepartner. Offer expires December 31, 2026 at 11:59 pm PST. Offer for $40 off the cost of one Square Stand, $75 off the cost of one Square Terminal, $100 off the cost of one Square Handheld, or $200 off the cost of one Square Register, excluding applicable taxes. Limited to one discount per product type per seller account. Each code is limited to one redemption per account holder. Valid for new Square customers located in the US only. Offer not valid with guest checkout. Square reserves the right to modify, revoke or cancel the offer at any time. Offer cannot be combined with any other coupon. Void where prohibited, not redeemable for cash, and non-transferable. #squarepartner #blockpartner