Different COLDCARD Mk3 devices may generate the same mnemonic phrase, with approximately 4.5 million possible starting states searchable within 3 seconds

Odaily News: Bitcoin News posted on X platform that a new technical analysis released by @KLoaec shows that some vulnerable COLDCARD Mk3 wallets may be generated from only approximately 4.5 million random number generator starting states, which can be searched in about 3 seconds on a single RTX 4090 GPU. Even accounting for additional uncertainty in each wallet's generation method, an attacker could complete the search in about 50 minutes on a single high-end GPU. More critically, this vulnerability could cause different devices to generate identical mnemonic phrases. Assuming 30,000 Mk3 devices, the analysis estimates that approximately 120 pairs of devices could generate the same random number stream. This collision estimate is theoretical but indicates that duplicate mnemonic generation across different devices may be possible.