coldcard

Cove - The simple bitcoin wallet

Create test PSBT files which are valid, but garbage values

Coldcard Interface Library in Rust

Binary-verified reverse engineering of the COLDCARD Mk3 weak-RNG vulnerability (4.0.1-4.1.9): root cause at the linker boundary, bounded PoC, and seed-to-xpub pipeline

Reproducible COLDCARD Mk3 predictable-RNG first-boot research, corrected CUDA scanner, evidence, and public handoff.

Generate address list from xpubs BIP44 BIP49 BIP84 segwit and legacy

Clean-room open-source Rust firmware for Coldcard hardware wallets. MIT licensed, no-std, Cortex-M4F.

TypeScript/JavaScript implementation of Seed XOR for splitting and combining BIP-39 seed phrases. Compatible with Coldcard.

Exact-model scanners for publicly known weak-RNG Bitcoin wallet vulnerabilities (Milk Sad, Trust Wallet, COLDCARD Mk2/3) plus HNP lattice attack PoC.

Implements the COLDCARD KeyTeleport protocol in rust

A local-first, watch-only Bitcoin UTXO planner. Import your xpub, inspect your UTXO set, plan spends and consolidations with fee-aware coin selection — no keys, no cloud, no telemetry.

Security-audit research code for the deterministic Yasmarang RNG in Coldcard hardware wallets (Mk2/Mk3/Mk4/Q/Mk5)

Tracks the bitcoin drained from Coldcard wallets with weak-entropy seeds, and whether the attackers ever move it. Detectors, datasets, and the chains deliberately left off.

Independent Python script to verify Coldcard dice entropy — including the "Add dice rolls" re-seeding mechanism, unsupported by Coldcard's own script.

a watch-only btc wallet for coldcard mk4

Docker image for Coldcard simulator

Go implementation of BIP85 (Deterministic Entropy From BIP32 Keychains). Derive mnemonics, private keys, passwords, and dice rolls from a single master backup.

Reproduce master fingerprint from XPUB

🧟 COLDCARD firmware with its crypto library (libngu) replaced by trezor-crypto. Unofficial, unaudited hobby fork — can brick your device and lose funds. Not affiliated with Coinkite or SatoshiLabs.

Cross-verifies BIP39 dice-roll seed derivation by executing the verbatim sources of Coldcard, SeedSigner, Trezor, and others. TEST ROLLS ONLY.