Some critical vulnerabilities in Coldcard build system went undetected for a decade, Jameson Lopp notes

Some critical vulnerabilities in Coldcard build system went undetected for a decade, Jameson Lopp notes
Coldcard bug went undetected for decade

Jameson Lopp, board member at Casa, draws attention to a long-undetected bug in the Coldcard build system. Lopp notes that the vulnerability was challenging to identify because it was not in the main code but rather in the build process itself.

According to Lopp, external reviews and most large language models missed the bug, with critical vulnerabilities remaining unaddressed for over 10 years.

Lopp has previously commented on key shifts in the Bitcoin network, noting that all BIP-110 nodes will be removed from the network in one month. He has also addressed risks related to cryptographic security, stating that self custody in crypto remains trustworthy despite random number generator concerns. These observations reflect Lopp's ongoing focus on network integrity and operational risks.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.