document nested passphrase wallet handling
What the developer wrote
Authored by scgbckbone
document nested passphrase wallet handling
What changed, and why it matters
This commit only adds a single line to the changelog, describing a bugfix that was apparently already made elsewhere. The bug concerned how COLDCARD's 'View Seed Words' and backup features handled BIP-39 passphrase wallets when a passphrase was applied on top of a temporary seed. In that case, the device reportedly treated the master seed as the parent instead of the immediate temporary seed, potentially showing or backing up the wrong secret. Because the actual code change is not in this commit, we cannot directly verify the fix or assess its full security implications from this diff alone.
Locate and review the actual code commit(s) implementing this bugfix to verify that the parent seed derivation for passphrase wallets correctly uses the immediate parent (temporary seed) rather than the master seed. Test View Seed Words and backup workflows with temporary seeds plus BIP-39 passphrases before release.
Security signals we found
Incorrect parent seed derivation for passphrase wallets
Potential exposure of wrong seed/secret in View Seed Words and backup workflows
Interaction between temporary seeds and BIP-39 passphrases
User-facing secret export functions affected
Evidence from the diff
The commit is a documentation-only changelog entry for a bugfix in nested passphrase wallet handling. It states that View Seed Words and backup workflows previously treated the master seed as the parent of every BIP-39 passphrase wallet, and failed to access the immediate parent seed when a passphrase was applied to a temporary seed. The actual code fix is not present in this commit, so the diff provides only a post-hoc description of the issue and fix.
Changed components
View Seed Words featureBackup SystemClone ColdcardKey Teleport Full COLDCARD BackupBIP-39 passphrase wallet handlingTemporary seed handlingInspect captured patch +1 / −0
### releases/Next-ChangeLog.md
@@ -25,6 +25,7 @@ This lists the new changes that have not yet been published in a normal release.
Thanks to [@drk1wi](https://github.com/drk1wi).
- Change: When a BIP-39 passphrase is active, View Seed Words now shows only the effective extended private key instead of the underlying seed words.
- Change: Backup System, Clone Coldcard, and Key Teleport’s Full COLDCARD Backup now capture the wallet secret currently in effect, including temporary seeds and BIP-39 passphrase wallets, and warn before export.
+- Bugfix: View Seed Words and backup workflows incorrectly treated the master seed as the parent of every BIP-39 passphrase wallet. When a passphrase was applied to a temporary seed, they could not access that immediate parent seed.
# Mk Specific Changes
Why this scored 35/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.