Coldcard Users Raise Eyebrows Over Similar XPUBs | Are These Cards Too Alike?

A growing concern among Coldcard owners revolves around the discovery that multiple devices share the same initial sequence of XPUBs. This has sparked debate on forums, raising questions about potential security risks associated with the widely-used hardware wallets.

Context of the Findings

In a recent discussion, a user revealed that they were setting up three Coldcards, all generating seed phrases independently. However, an alarming similarity showed that the first 10 to 13 digits of each XPUB matched. This raised suspicions as users typically expect unique identifiers from different devices.

User Reactions

Many in the community expressed similar concerns. One user stated, "I was surprised to see such similar XPUBs. I'll try resetting the Coldcards and creating new seeds." This reflects a cautious approach from some. Another echoed worries, saying, "Seeing the same digits is concerning. Shouldn’t they be random?"

Themes Emerging from Discussions

1. Security Concerns: Users worry that identical XPUBs could indicate a flaw in the device’s software, which should generate unique identifiers.

2. Resetting Devices: Some users suggested resetting their Coldcards to generate new seeds as a precautionary measure.

3. Seeking Clarification: There is a strong need for official advice from Coldcard on this anomaly, with many asking if this is common or a red flag.

Noteworthy Quotes

"This isn’t exactly groundbreaking, but it does raise questions."

"Should I be worried? We need answers from the company."

Key Points

• ✦ Users report similar digits across multiple Coldcards.

• ✦ Resetting devices may help create unique XPUBs.

• ✦ Ongoing discussions show a need for clarity from the manufacturer.

As discussions evolve, users are left pondering whether this is a minor glitch or a significant security risk. Will Coldcard address these concerns, or will users need to stay vigilant on their own?