Coinkite disclosed a technical vulnerability on July 30 that could have weakened the entropy of wallet seed generation for some users. The issue traces back to a 2021 integration change that caused the wallet's seed generation to fall back to a MicroPython software random number generator instead of the intended hardware path. While no exploit has been reported, the disclosure adds to a growing list of ways Bitcoin custody can fail even in cold storage.
How the flaw works
The vulnerability stems from a 2021 integration change in Coinkite's wallet software. Under certain conditions, the seed generation routine used a MicroPython software fallback for random number generation instead of the dedicated hardware random-number path. That matters because Bitcoin's BIP-39 seed generation relies entirely on computer-generated entropy. A weak start propagates through the entire mnemonic phrase, potentially making seeds guessable. Coinkite didn't say how many wallets were affected or whether any seeds were actually compromised, but the disclosure itself is a reminder that even hardware wallets depend on software somewhere in the stack.
A pattern of custody risks
This isn't the first time a wallet vendor has had to own up to a seed-related vulnerability. In December 2023, malicious releases of Ledger's dynamically loaded Connect Kit library induced users to sign unauthorized transactions, though Ledger's core infrastructure remained untouched. The Dark Skippy attack, reported in August 2024, showed that seed material can be encoded into two valid Bitcoin transaction signatures from an air-gapped device — no known real-world cases at the time, but the proof of concept was clear. And a USENIX WOOT 2024 project built an end-to-end backdoored wallet on Bitcoin testnet, leaking a 256-bit seed in 10 valid ECDSA signatures. Cold storage removes the network connection, but the surrounding machinery — firmware, builds, transaction construction, signing, hardware, recovery — remains vulnerable.
AI as a new threat vector
AI is increasingly identified as a growing threat to Bitcoin custody. The reason: AI can find seams in the custody stack that humans might miss, including code paths, build systems, and devices. Reproducible-build procedures can verify that distributed binaries match source code, but they don't guarantee source correctness. An AI trained on vulnerability patterns could theoretically spot the kind of fallback logic that Coinkite just disclosed — or worse, exploit it before the vendor does. The attack surface is wider than many assume.
What wallets are doing about it
Wallet developers aren't waiting for the next disclosure. As of July 2026, some are implementing spending limits, approved destinations, and delayed transfers to prevent irreversible thefts. These features don't fix weak entropy, but they add layers of protection after the seed is generated. The question is whether the industry can patch the upstream problems — like a 2021 integration change that sat dormant for five years — before attackers find them first.
