Skip to content

docs: add Coldcard Mk2/Mk3 seed-entropy security warning to README - #524

Open
nrobi144 wants to merge 3 commits into
caravan-bitcoin:mainfrom
nrobi144:coldcard-mk3-warning
Open

docs: add Coldcard Mk2/Mk3 seed-entropy security warning to README#524
nrobi144 wants to merge 3 commits into
caravan-bitcoin:mainfrom
nrobi144:coldcard-mk3-warning

Conversation

@nrobi144

@nrobi144 nrobi144 commented Aug 6, 2026

Copy link
Copy Markdown

Summary

Adds a security note under the Coldcard entry in apps/coordinator/README.md (which lists "Coldcard Mk2, Mk3, & Mk4").

In July 2026 Coinkite disclosed a firmware build error that reduced generated-seed entropy on Coldcard Mk3 (firmware 4.0.1–5.0.3) and pre-fix Mk4/Q. Since the README names the affected Mk2/Mk3 explicitly, this adds a one-line sourced warning next to it. Docs-only change.

Refs #523.

@changeset-bot

changeset-bot Bot commented Aug 6, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: dbd697b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@vercel

vercel Bot commented Aug 6, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
caravan-coordinator Ready Ready Preview Aug 7, 2026 5:18am

Request Review

Shadouts
Shadouts previously approved these changes Aug 6, 2026

@Shadouts Shadouts left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you

@Shadouts Shadouts left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I see what you changed. Admittedly, it's difficult to interpret what they are describing between their blogpost and their firmware download page which has two versions of mk4 firmware. But I think this description is fine.

@Shadouts

Copy link
Copy Markdown
Contributor

run npm run changeset to add details about your change for version bumping purpose.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants