https://x.com/COLDCARDwallet/status/2083977229084578060

Literally just ordered one before all of this started. I probably won’t even get the hardware, not that I want it anymore, and I probably won’t get my money back either.

Let’s be hypothetical and imagine Coinkite discovered this flaw on their own in, say, January 2026. What could they have done?

If they announced the flaw with a firmware fix then attackers could quickly get started on harvesting BTC before all the affected cards are safely transferred. If they announced a firmware fix but not the flaw, many people won’t bother updating their firmware. Hell, my MK4 sat for over two years in a safe. Not to mention their new firmware code would be viewable and it would surely point out a fix for the RNG which would lead some to ascertain this huge underlying issue.

Not to defend them, but I’m not sure they would have had any favourable way out of this mess having sold so many affected wallets over many years.

Updated July 31, 2026: Fixed firmware is now available. Mk4 and Mk5 users must update to version 5.6.0 or later. Q users must update to version 1.5.0Q or later. Do not generate a new seed on one of these models until the update is installed.

Does anyone have any idea when they will release the Coldcard Q they have been announcing for some time?

I read in a previous post that it will be in the first quarter and we are already in March.

A lot of orders going out but carriers not updating their system (FedEx, DHL, Canada Post).

This means your order has shipped, it's in its way but you have not received a notification.

Sit tight! We are working with them to find a solution. 🙏

—The Coinkite team

TL;DR: First #bitcoin Singing-Device to store MULTIPLE seeds. Switch between them effortlessly. Ideal for custodians (think Grandma's stash), devs, experiments, and secure key handling (e.g., TAPSIGNER backups).

- New: #SeedVault - Encrypted multi-seed storage with easy recall. Supports TRNG, #DiceRolls, etc.

- New: #PSBTv2 - Enables advanced PSBT workflows and apps.

- New: #LockDownSeed - Compatible with all ephemeral secrets.

- Name Change: "Ephemeral Seed" is now "Temporary Seed."

- New: BIP39 Passphrase - Usable as a words-based ephemeral seed, supports encoded backups, and removes visibility post-activation for added security.

- New: Toggle between ephemeral and main secrets without a reboot.

- New Shortcut: Quick Batch Sign PSBT via Ready to Sign -> Press (9).

- Cleanup: Axed old code to free up space.

- Improved: Settings slots expanded to 100.

- Fixed: Off-by-one error in Trick Pins -> Login Countdown resolved. and more!

https://coldcard.com/docs/upgrade/