Episode Details

James O'Beirne joins Marty to break down the critical Coldcard RNG vulnerability affecting devices produced after 2021. They discuss how insufficient entropy generation exposes private keys, why MK2, MK3, MK4, and Q users must migrate funds immediately, and how AI models accelerated the discovery. The conversation covers multisig risks, passphrase limitations, dice roll safety, and the broader collapse of trust in single-vendor hardware wallets. Essential listening for Bitcoin self-custody security.

James on X: https://x.com/jamesob

Find the Home Mining Playbook here: https://www.tftc.io/home-mining-energy-playbook

STACK SATS hat: https://tftcmerch.io/

Our newsletter: https://www.tftc.io/bitcoin-brief/

TFTC Elite (Ad-free & Discord): https://www.tftc.io/#/portal/signup/

Discord: https://discord.gg/yHGkvYxdqT

Opportunity Cost Extension: https://www.opportunitycost.app/

Shoutout to our sponsors:

Block:

• Cash App: For a limited time, new customers can get $21 added to their balance. Just use code TFTC10 when you sign up, and send at least $5 to a friend in the first two weeks. Terms apply. Bitcoin services by Block, Inc. See the Bitcoin disclosures at cash.app/legal/podcast.
• Square: Visit http://square.com/go/tftc for up to $200 off eligible Square hardware.
• Bitkey: Use code TFTC10 for 10% off the new Bitkey.

Aven

https://www.aven.com/bitcoin

CrowdHealth

https://www.joincrowdhealth.com/tftc

Unchained

https://unchained.com/tftc/

Salt of the Earth:

https://drinksote.com/tftc

Join the TFTC Movement:

Main YT Channel

https://www.youtube.com/c/TFTC21/videos

Clips YT Channel

https://www.youtube.com/channel/UCUQcW3jxfQfEUS8kqR5pJtQ

Website

https://tftc.io/

Newsletter

tftc.io/bitcoin-brief/

Twitter

https://twitter.com/tftc21

Instagram

https://www.instagram.com/tftc.io/

Nostr

https://primal.net/tftc

Follow Marty Bent:

Twitter

https://twitter.com/martybent

Nostr

https://primal.net/martybent

Newsletter

https://tftc.io/martys-bent/

Podcast

https://www.tftc.io/tag/podcasts/

Disclosure: Bitcoin services are provided by Block, Inc. Bitcoin services are not licensable activity in all U.S. states and territories, and not all services are available in all states. Bitkey is not available in New York. Block, Inc. operates in New York as Block of Delaware and is licensed to engage in virtual currency business activity by the New York State Department of Financial Services. Bitcoin is a non-deposit, non-bank product that is not FDIC insured and involves risk, including monetary loss. For additional information, see the Bitcoin disclosures: