ColdCard's $100M Random Number Generation Hack stories

Nov 2, 2026

Trezor raises wallet passphrase limit to 128 characters

Hardware wallet maker Trezor increased its maximum passphrase length from 50 to 128 characters, citing July's Coldcard attacks where strong passphrases helped protect users whose recovery information was compromised.

Nov 2, 20262 sources

Aug 18, 2026

BitBox fixes severe Bitcoin wallet vulnerabilities discovered in AI-assisted security audit

Bitcoin hardware wallet manufacturer BitBox released firmware version 9.26.5 to address severe security vulnerabilities discovered during internal security reviews that utilized AI models. The company confirmed no funds were stolen but urged users to update their devices.

Aug 18, 20263 sources

Top claims

▪Trezor increased the maximum passphrase length on supported hardware wallets to 128 characters in its Trezor Suite update
▪Trezor's core firmware 2.13.0 changelog dated October 21, 2026 lists Trezor's passphrase limit as 128 bytes, which rolled out in Suite desktop version 26.10.3 and mobile version 26.10.2
▪Using a 128-character passphrase on a Trezor device requires both the latest Trezor Suite app and updated device firmware, while older Trezor firmware retains a 50-character limit

People involved

Alex Thorn

Subtopics

Bitcoin2 Crypto hacks2 Crypto security2 Explaining the Critical Coldcard RNG Vulnerability2 Hardware wallet2 Hardware wallet security2 Self-custody2 AI security1 AI's Role in Accelerating Vulnerability Discovery1 Bitcoin security & risks1 Bitcoin wallets & custody1

Related timelines