pull down to refresh

30 sats \ 0 replies \ @anon 31 Jul \ parent \ on: Coldcard Mk2, Mk3, Mk4, Mk5, and Q Firmware Security Vulnerability security bitcoin bitdevs
On March 1, 2021: The “First pass w/ libNgU” commit removed the GPL @Trezor-derived crypto libraries and replaced them with libNgU. That same 120-file commit changed seed generation code. libNgU was licensed with a novel “Licensed for Bitcoin Only” license

So this was the precise moment of the vulnerability?

write
compose