Coldcard and Ledger Failures Put Multisignature Security in Focus

Two hardware-wallet incidents involving Coldcard and Ledger have renewed attention on recovery-phrase security, as a seed-generation bug and a hardware implant show how one compromised credential can put funds at risk. The incidents share a security risk: a single key can authorize spending even when its seed was generated poorly or exposed through a compromised device. BitGo offers multisignature services, giving the company a commercial interest in the security model it recommends. Coinkite, Coldcard’s maker, said firmware versions dating from 2021 through July 2026 had a flaw that weakened seed entropy.

Source: TokenPost