AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 44 Bitcoin

seedxor allowed when hobbled

Public commit record

What the developer wrote

Authored by Peter D. Gray

35/100 · Opaque
seedxor allowed when hobbled
✓ Descriptive subject! No meaningful explanatory body! Opaque security-relevant change
The short version

What changed, and why it matters

This commit fixes a security policy bug in the COLDCARD hardware wallet. In 'hobbled mode'—a restricted operating mode meant to limit what secrets can leave or be combined—the device was incorrectly allowing users to include the wallet's master seed as one of the parts when restoring a seed via XOR. The patch removes that option when hobbled, so a locked-down COLDCARD can no longer be tricked or misused into mixing its master seed into an externally reconstructed secret.

Recommended action

Treat this as a security fix and include it in the next firmware release. Review other seed-combining or temporary-seed flows for similar missing hobbled_mode checks. Verify that the new assertion cannot be triggered through menu fuzzing or automated input.

Security signals we found

01

hobbled-mode bypass / policy enforcement gap

02

seed material exposure through XOR combination

03

UI flow change that removes a secret-export option under a restricted mode

04

regression test added for the restricted-mode behavior

Risk score

Why this scored 44/100

Our methodology →
Potential impact 12/30
Exploitability 8/25
Stealth signal 6/15
Affected reach 7/15
Confidence 7/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.