掷骰子无法保护全部Coldcard功能,多项功能或受Yasmarang PRNG缺陷影响
2026-08-01 16:41
Odaily Planet Daily News: Bitcoin News posted on X platform that even if the mnemonic phrase remains secure because it was generated by rolling dice or importing an existing mnemonic, multiple features of Coldcard may still be vulnerable due to the Yasmarang PRNG flaw. Affected features include paper wallets, device cloning, USB sessions, Secret Teleport, co-signing keys, password generator, and HSM mode. If the mnemonic phrase was imported or generated with a sufficient number of dice rolls, the mnemonic itself remains secure, but using these features may still expose secret information generated by the flawed random number generator.
