coldcard

Cove - The simple bitcoin wallet

Create test PSBT files which are valid, but garbage values

Coldcard Interface Library in Rust

Binary-verified reverse engineering of the COLDCARD Mk3 weak-RNG vulnerability (4.0.1-4.1.9): root cause at the linker boundary, bounded PoC, and seed-to-xpub pipeline

Reproducible COLDCARD Mk3 predictable-RNG first-boot research, corrected CUDA scanner, evidence, and public handoff.

Generate address list from xpubs BIP44 BIP49 BIP84 segwit and legacy

Clean-room open-source Rust firmware for Coldcard hardware wallets. MIT licensed, no-std, Cortex-M4F.

Exact-model scanners for publicly known weak-RNG Bitcoin wallet vulnerabilities (Milk Sad, Trust Wallet, COLDCARD Mk2/3) plus HNP lattice attack PoC.

TypeScript/JavaScript implementation of Seed XOR for splitting and combining BIP-39 seed phrases. Compatible with Coldcard.

Security-audit research code for the deterministic Yasmarang RNG in Coldcard hardware wallets (Mk2/Mk3/Mk4/Q/Mk5)

A local-first, watch-only Bitcoin UTXO planner. Import your xpub, inspect your UTXO set, plan spends and consolidations with fee-aware coin selection — no keys, no cloud, no telemetry.

Tracks the bitcoin drained from Coldcard wallets with weak-entropy seeds, and whether the attackers ever move it. Detectors, datasets, and the chains deliberately left off.

Implements the COLDCARD KeyTeleport protocol in rust

Independent Python script to verify Coldcard dice entropy — including the "Add dice rolls" re-seeding mechanism, unsupported by Coldcard's own script.

a watch-only btc wallet for coldcard mk4

🧟 COLDCARD firmware with its crypto library (libngu) replaced by trezor-crypto. Unofficial, unaudited hobby fork — can brick your device and lose funds. Not affiliated with Coinkite or SatoshiLabs.

Go implementation of BIP85 (Deterministic Entropy From BIP32 Keychains). Derive mnemonics, private keys, passwords, and dice rolls from a single master backup.

Cross-verifies BIP39 dice-roll seed derivation by executing the verbatim sources of Coldcard, SeedSigner, Trezor, and others. TEST ROLLS ONLY.

Reproduce master fingerprint from XPUB

Coldcard RNG vulnerability research, exploitation toolkit, and victim database. Firmware bit-exact PRNG reproduction.