coldcard

Cove - The simple bitcoin wallet

Create test PSBT files which are valid, but garbage values

Coldcard Interface Library in Rust

Clean-room open-source Rust firmware for Coldcard hardware wallets. MIT licensed, no-std, Cortex-M4F.

Binary-verified reverse engineering of the COLDCARD Mk3 weak-RNG vulnerability (4.0.1-4.1.9): root cause at the linker boundary, bounded PoC, and seed-to-xpub pipeline

Exact-model scanners for publicly known weak-RNG Bitcoin wallet vulnerabilities (Milk Sad, Trust Wallet, COLDCARD Mk2/3) plus HNP lattice attack PoC.

Reproducible COLDCARD Mk3 predictable-RNG first-boot research, corrected CUDA scanner, evidence, and public handoff.

Generate address list from xpubs BIP44 BIP49 BIP84 segwit and legacy

A full .pdf report of the coldcard dice roll path showing inputs and outputs on production firmware.

TypeScript/JavaScript implementation of Seed XOR for splitting and combining BIP-39 seed phrases. Compatible with Coldcard.

Security-audit research code for the deterministic Yasmarang RNG in Coldcard hardware wallets (Mk2/Mk3/Mk4/Q/Mk5)

❄️ Firmware and simulator for Coldcard Hardware Wallet

Tracks the bitcoin drained from Coldcard wallets with weak-entropy seeds, and whether the attackers ever move it. Detectors, datasets, and the chains deliberately left off.

A local-first, watch-only Bitcoin UTXO planner. Import your xpub, inspect your UTXO set, plan spends and consolidations with fee-aware coin selection — no keys, no cloud, no telemetry.

Implements the COLDCARD KeyTeleport protocol in rust

Independent Python script to verify Coldcard dice entropy — including the "Add dice rolls" re-seeding mechanism, unsupported by Coldcard's own script.

Rust port of the CKCC libraries + CLI

a watch-only btc wallet for coldcard mk4

Coldcard RNG vulnerability research, exploitation toolkit, and victim database. Firmware bit-exact PRNG reproduction.

Cross-verifies BIP39 dice-roll seed derivation by executing the verbatim sources of Coldcard, SeedSigner, Trezor, and others. TEST ROLLS ONLY.