Episode notes
James O'Beirne joins Marty to break down the critical Coldcard RNG vulnerability affecting devices produced after 2021. They discuss how insufficient entropy generation exposes private keys, why MK2, MK3, MK4, and Q users must migrate funds immediately, and how AI models accelerated the discovery. The conversation covers multisig risks, passphrase limitations, dice roll safety, and the broader collapse of trust in single-vendor hardware wallets. Essential listening for Bitcoin self-custody security.
James on X: https://x.com/jamesob
Find the Home Mining Playbook here: https://www.tftc.io/home-mining-energy-playbook
STACK SATS hat: https://tftcmerch.io/
Our newsletter: https://www.tftc.io/bitcoin-brief/
TFTC Elite (Ad-free & Discord): https://www.tftc.io/#/portal/signup/
Discord: https://discord.gg/yHGkvYxdqT
Opportunity Cost Extension: https://www.opportunitycost.app/
Shoutout to our sponsors:
Block:
- Cash App: For a limited time, new customers can get $21 added to their balance. Just use code TFTC10 when you sign up, and send at least $5 to a friend in the first two weeks. Terms apply. Bitcoin services by Block, Inc. See the Bitcoin disclosures at cash.app/legal/podcast.
- Square: Visit http://square.com/go/tftc for up to $200 off eligible Square hardware.
- Bitkey: Use code TFTC10 for 10% off the new Bitkey.
Aven
CrowdHealth
https://www.joincrowdhealth.com/tftc
Unchained
Salt of the Earth:
Join the TFTC Movement:
Main YT Channel
https://www.youtube.com/c/TFTC21/videos
Clips YT Channel
https://www.youtube.com/channel/UCUQcW3jxfQfEUS8kqR5pJtQ
Website
Newsletter
https://www.instagram.com/tftc.io/
Nostr
Follow Marty Bent:
Nostr
Newsletter
Podcast
https://www.tftc.io/tag/podcasts/
Disclosure: Bitcoin services are provided by Block, Inc. Bitcoin services are not licensable activity in all U.S. states and territories, and not all services are available in all states. Bitkey is not available in New York. Block, Inc. operates in New York as Block of Delaware and is licensed to engage in virtual currency business activity by the New York State Department of Financial Services. Bitcoin is a non-deposit, non-bank product that is not FDIC insured and involves risk, including monetary loss. For additional information, see the Bitcoin disclosures: https://help.cash.app/btcdisclosures
Get up to $200 off Square hardware when you sign up at http://square.com/go/tftc! #squarepartner. Offer expires December 31, 2026 at 11:59 pm PST. Offer for $40 off the cost of one Square Stand, $75 off the cost of one Square Terminal, $100 off the cost of one Square Handheld, or $200 off the cost of one Square Register, excluding applicable taxes. Limited to one discount per product type per seller account. Each code is limited to one redemption per account holder. Valid for new Square customers located in the US only. Offer not valid with guest checkout. Square reserves the right to modify, revoke or cancel the offer at any time. Offer cannot be combined with any other coupon. Void where prohibited, not redeemable for cash, and non-transferable. #squarepartner #blockpartner
