Hardware Wallet on Time Friend

The BIP-39 Passphrase: An Extra Layer of Protection for Your Seed Phrase

Sat, 01 Aug 2026 10:00:00 +0000

Security incidents have kept coming all year, and COLDCARD was just the latest.

In late July, a hardware wallet firmware bug: during seed generation, the device was supposed to draw on its hardware true random number generator, but in certain cases it silently fell back to a weak software PRNG. The seeds it produced carried only a few dozen bits of entropy, attackers could derive the private keys, and tens of millions of dollars walked away in 41 minutes.

The Cardano SecondFi Signing Incident: How One On-Chain Transaction Leaked Ed25519 Private Keys

Sat, 27 Jun 2026 17:29:00 +0000

In late June, SecondFi — the Cardano wallet that grew out of Yoroi — made headlines across the ecosystem. No smart contract was drained. No private keys were stolen off a device. There wasn’t even a phishing campaign. The attackers simply read the blockchain. Within three days, roughly 16 million ADA (about $2.4 million at the time) vanished from 374 wallets, and the team urgently moved another ~129 million ADA to a third-party custodian as a rescue measure.