Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The STM32 in the ColdCard has a 96-bit UID "fused" at the factory. The lower 32 bits of this are seeded into the Yasmarang PRNG's initial state. Possession of a ColdCard with a UID matching a contested wallet might be able to serve as evidence of ownership.


in other words, this attack could link together different wallets created on the same coldcard?


Yes. Huge boon for chain analysis companies, even in cases where the coins moved long ago and are no longer sweepable.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: