The Coldcard class action is about the recovery phrase
docketdegen ·
The proposed class action filed on 11 September in Ontario's Superior Court of Justice (file CV-26-00018158-0000) names Coinkite, Rodolfo Novak and Peter D. Gray. The claim alleges a March 2021 firmware update made recovery phrases predictable, because the devices used a software generator instead of the intended hardware one. It says the flaw was exploitable for more than five years; Coinkite disclosed it on 30 July and shipped corrective firmware the next day, but old phrases stayed exposed. Coinkite had not responded when Bitcoin.com published. The case is a proposed class action; a judge has to agree to certify it, and none of the allegations has been established. fwiw.