A new AI model found a Coldcard flaw that human reviewers missed, says Coinkite CEO NVK, but Bitcoin developers disagree. The flaw in firmware 4.0.1+ bypasses the hardware random number generator; over 5,200 addresses lost about 1,816 BTC, worth $116 million, from July 30 to August 4. NVK says there were at least 15 prior reviews. James O'Beirne says he privately flagged Coldcard RNG issues in May 2025. Firmware updates fix new devices but not old mnemonics; affected users need new mnemonics.
Odaily星球日报讯 据 Bitcoin News 监测，Coinkite CEO Rodolfo Novak（NVK）表示，一款新 AI 模型发现了人工审查人员遗漏的 Coldcard 漏洞，比特币开发者对此提出异议。该漏洞存在于 4.0.1 及后续版本固件中，可绕过硬件随机数生成器；7 月 30 日至 8 月 4 日期间，超 5200 个地址因此损失约 1816 枚 BTC，价值约 1.16 亿美元。NVK 称，此前至少有 15 次审查。James O'Beirne 表示，他曾于 2025 年 5 月私下指出 Coldcard 随机数生成存在问题。固件更新可修复新设备的问题，但无法修复旧助记词；受影响用户需要生成新的助记词。