COLDCARD Mk3 Devices May Generate Identical Mnemonic Phrases, 4.5 Million States Searchable in 3 Seconds

Some vulnerable COLDCARD Mk3 wallets may be generated from only about 4.5 million initial states of random number generators, which can be searched in approximately 3 seconds using a single RTX 4090 GPU. Even considering the additional uncertainties in the way each wallet generates, an attacker could potentially complete the search in about 50 minutes on a single high-end GPU. This vulnerability could lead to different devices generating the same mnemonic phrases. Assuming there are 30,000 Mk3 devices, analysis estimates that about 120 pairs of devices could potentially generate the same stream of random numbers. This collision estimate is theoretical but indicates that the occurrence of different devices generating duplicate mnemonic phrases may be possible.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.