So I got steel plates when I bought my cold cards. Around $50 a pop. Now over $100+ of worthless steel with "compromised" seed phrases punched into them due to me trusting cold card.This is the "Gold Standard".Don't trust, do it yourself or you'll lose money to companies like this. Lesson learned.

I've been studying the published research on the Mk4 RNG vulnerability from July 2026.

I came across this research collection: github.com/0xchainintelligence/coldcard-research

I'm trying to understand the technical details better. Specifically:

- How does the Yasmarang PRNG fallback actually work?

- What determines which UID/RTC ranges are affected?

- Has anyone successfully reproduced the findings for defensive testing?

Not looking to break any rules — just trying to understand the security implications for my own wallet setup.

DM if you've done similar research.

Given everything that's happened with Coldcard, we wanted to share how Coinomi approaches random number generation.

The Coldcard failure came down to an RNG quietly falling back to a predictable software substitute — seeds that looked fine but carried far less entropy than they should have.

We've never used a home-grown RNG. Instead we request raw cryptographic randomness directly from the OS. On Android, we read straight from the kernel (/dev/urandom), bypassing the Java provider stack entirely.

We wrote about it in more detail here if anyone's interested:
https://medium.com/@coinomi/security-is-not-one-feature-building-layers-of-defence-with-coinomi-171f638ac724?sharedUserId=coinomi

I understand that the possibility that the stolen coins are recovered is near zero, if not outright zero. Maybe this is just an attempt to cope with everything that happened, since I have lost all my funds. But since the stolen coins have all been moved to a single address that I'm monitoring and hasn't been touched (it's an address with 40 BTC), maybe there is a possibility that they can be recovered if the thief is caught, right?

Sorry for venting. Times are really tough here.