← 返回部落格

[News Brief] Apr 22, morning | A roughly five-year security flaw exposed in Coldcard hardware wallets

A randomness-generation flaw in some Coldcard hardware wallet models has been found to have weakened seed security for about five years. Seeds generated with the affected firmware cannot be made safe through existing mitigation methods and must be replaced with newly generated seeds.

[News Brief] Apr 22, morning | A roughly five-year security flaw exposed in Coldcard hardware wallets

A randomness-generation flaw has been uncovered in some models of the Coldcard hardware wallet, reducing the security level of wallet seeds for about five years.

The issue has been traced to a 2021 code migration in which a predictable software pseudorandom number generator was reportedly used instead of the intended hardware random source. Wu Blockchain’s X account said the flaw reduced the seed search space to about 40 bits on the Mk2 and Mk3, and about 72 bits on later models. This means the number of possibilities an attacker would need to test to guess a seed fell sharply from the original design. Seeds created with the vulnerable firmware cannot be secured simply by updating the firmware or importing the recovery phrase into another wallet. Users need to generate a new seed using patched firmware or in a separate trusted environment.

Circle’s second-quarter USDC transaction volume surged to $14.8 trillion, but revenue came in below market expectations.

Crypto outlet AMB Crypto reported that while USDC transaction activity rose sharply, lower reserve income limited Circle’s revenue growth. Circle returned to profitability in the second quarter, but slower reserve-yield income weighed on results.

The U.S. Senate again delayed action on the CLARITY Act, which would regulate digital-asset market structure, after prioritizing cloture on other legislation.

CoinGape reported that Senate Majority Leader John Thune filed cloture motions for other bills instead of the CLARITY Act. Cloture is the Senate procedure used to end debate and move to a vote. Cloture proceedings for the CLARITY Act have not begun. Bipartisan negotiations over the bill are still ongoing.

With the CLARITY Act left off the Senate’s schedule for the day, prediction-market odds of it being signed into law this year fell to 16%.

BlockBeats reported on Aug. 6 that the bill’s exclusion from the Senate calendar coincided with the drop in prediction-market odds. The figure reflects market pricing on the probability of the bill being signed into law within the year.

U.S. Senator Josh Hawley voted against the CLARITY Act, citing risks to community banks.

Crypto Briefing reported that Hawley said digital-asset regulation should be designed carefully to protect local economies. His opposition again highlighted the legislative debate over balancing a digital-asset regulatory framework with protections for community banks.

The U.S. Department of Justice has charged the founder of an NFT project with fraud, alleging he spent $10 million raised from token sales for personal use.

The DOJ claims that Taj Tarsha, founder of Few and Far, used investor funds for himself. The charge brought against Tarsha is fraud. BeInCrypto reported this based on the DOJ’s announcement.

Coinbase will suspend trading for six trading pairs on Aug. 6.

According to Wu Blockchain, Coinbase Markets said the affected pairs are LSETH-ETH, MINA-EUR, GRT-GBP, MASK-GBP, CHZ-USDT, and CRO-USDT.

Coinbase has ended support for six non-dollar trading pairs, including MINA and MASK.

The move is intended to concentrate liquidity and improve overall market health. Coinbase Markets said that, as of 1:00 a.m. Korea time on Oct. 30, 2025, it had delisted the MASK-USDT, MASK-EUR, MINA-USDT, GMT-USDT, AXS-BTC, and SNX-BTC pairs. This does not mean trading support for the assets themselves has ended. Coinbase Advanced users in supported regions can still trade Mask Network, Mina, STEPN (GMT), Axie Infinity (AXS), and Synthetix (SNX) on U.S. dollar-denominated order books.

The studio behind the blockchain game Pirate Nation has shut down and released the game’s code and art assets under a CC0 license.

Crypto Briefing reported on the release and noted the difficulties blockchain games face in sustaining user engagement and profitability.

Hyperliquid has listed an RDDT-linked perpetual contract with up to 10x leverage.

Odaily reported that trading support for the contract has begun on Hyperliquid.