🚨 Coldcard Hack Explained: How Predictable Seeds Led to Stolen Bitcoin
Many people believe the recent Coldcard incident was a "Bitcoin hack." It wasn't.
Bitcoin's cryptography was never broken.
The vulnerability was in the wallet's random number generation during seed creation.
Here's the simplified explanation:
✅ Expected:
Hardware True RNG
↓
256 bits of true entropy
↓
BIP-39 Seed
↓
Private Keys
❌ Faulty firmware:
Hardware RNG
✗
↓
Fallback PRNG
↓
Small internal state (≈32–40 bits, depending on analysis)
↓
256-bit output
↓
BIP-39 Seed
This is the critical concept:
The wallet still produced a 256-bit seed, but those 256 bits were generated from a much smaller amount of unpredictable information.
Think of it this way:
A movie can be 50 GB in size.
But if it was generated from a tiny script, the real information content is only the script.
The same applies to pseudorandom generators.
If the internal entropy is only 40 bits, the number of possible seeds is:
2⁴⁰ = 1,099,511,627,776
That sounds enormous...
...until you compare it with the intended security:
2²⁵⁶ ≈ 1.16 × 10⁷⁷
The reduction isn't "a little weaker."
It's the difference between astronomically impossible and potentially searchable with sufficient computing resources.
This wasn't a failure of:
• Bitcoin
• ECDSA
• SHA-256
• BIP-39
It was a failure of entropy generation—arguably the single most important component of any cryptographic wallet.
Lesson: In cryptography, the strength of your keys is determined not just by their length, but by the quality of the randomness that created them.
Source: engineering.block.xyz/blog/p…
41
Nikos M retweeted
Ankara’s Maritime Fiction Will Meet a Price
Ankara recasts the "special status maritime zone" as law.
It is "the Perimeter" Law: illegal cartography turned into authority, and authority into orders across the Black Sea, the Aegean and the Eastern Mediterranean.
A state outside UNCLOS cannot legislate the sea from Ankara.
Turkey cannot reject the Law of the Sea and then impose an Ankara-made maritime regime on Europe, NATO and its neighbours.
The Aegean is not Turkish administrative space.
The Eastern Mediterranean is not an annex of Ankara. The Black Sea is not a licence to turn every sea around Turkey into a Turkish command zone.
The Turkey-Libya memorandum carried too little cost. Ankara learned that an illegal map could survive. Now it wants that map to govern.
That calculation ends now.
This is not only a Greek issue.
It is a systemic test for Europe, NATO and the maritime order.
No state may launder maritime coercion through domestic law, then dispatch vessels to enforce it as if the world were within Ankara’s jurisdiction.
Against the Perimeter Law, the response is not protest. It is a counter-perimeter Turkey has not yet encountered: legal, naval, diplomatic, economic - and yes, also operational.
If Turkey takes this fiction into the water, it will not meet a note. It will meet a price.
Article 5 will not be a life jacket.
International law will not be a harbour.
Unlawful maps do not float forever.
Neither do vessels sent to enforce them.
Nikos M retweeted
🇪🇸🇺🇸 Spaniards just ranked Trump as a bigger threat to world peace than Putin, Netanyahu, Kim Jong-un, Xi Jinping, and Iran's Supreme Leader.
63% say Trump poses a "very high threat."
Source: EL PAÍS
















