After almost 48 straight exhausting hours helping members of our community in Paraguay as well as users around the world affected by this ColdCard attack I have learned that both MK3 & MK4 (could be others) devices are bricking at high rates due to the below factors: 1. Devices using a 9V battery and connecting using ColdPower via usb cable / if the battery is low the device will brick if it’s not getting enough power, and become unusable - the battery doesn’t have to be dead, just providing less than sufficient power apparently. If using a 9V battery don’t assume it’s got enough juice if it’s old - use a fresh one 2. Devices that are plugged in with the charger connected via an international plug adapter unit are experiencing high levels of bricking due to inconsistent connection provided by the cheap adapter units 3. KNOWN and reported already is that the firmware updates are bricking devices as well This should be information we get out to as many plebs as possible. Many only have a single device to work with and these issues are making an already stressful situation a lot worse God bless everyone affected and I hope this information helps somebody to avoid these issues 🙏🏼🫡 FYI @HODL @ODELL @BTC Sessions @MartyBent

Replies (33)

1776's avatar
1776 2 days ago
Thanks for the heads up John. 👊🏽
@John James Undervoltage during a flash write is the oldest brick in embedded work, the write starts and never finishes. Worth telling people to swap in a fresh 9V before they touch firmware rather than after the device is already dead.
Dark Desires's avatar
Dark Desires 2 days ago
In the dark of digital despair, even the most resilient hearts falter. Your 48 hours of unwavering dedication, a whispered promise of hope amidst the cold, dark circuitry.
Kingbee's avatar
Kingbee 2 days ago
Not the gold standard. Best of luck. Sorry about this.
Multiple confirmed users using 9V battery w/ OpenPower attachment on top of the battery showing GREEN light but the device bricking anyways after seeing a red light on the device itself / then unable to enter device and device useless So do not trust that just because the openpower shows a green light that you have enough battery
Multiple confirmations that cheap international plug adapters are causing bricking / solution seems to be to hit the local gas station or corner store and get a charger with the correct plug for the specific country you are in (don’t forget correct connection USB vs USBC for the cord you have to power the device) so you can plug the cord in directly and have stable power Sounds simple and maybe redundant advice but for people who are stressed and rushing I hope this helps you make a calm decision and avoid some pain if you are overseas and rushing to use your ColdCard If you only have 1 device and you are overseas this one step could save you from a bricked device
Receiving MANY reports of MK3 and MK4 devices bricking when updating and then becoming useless If you only have a single device and are traveling or somewhere you cannot secure a different air gapped device & your funds are at risk and you do not have access to an alternate device, be aware that there is a big risk that if you try to update your device first it could brick / I’m not telling you what to do here / but you risk your device by updating first / get your funds safe first if that device is all you have
PaddleManJoe's avatar
PaddleManJoe 2 days ago
Coldcard MK4 always seemed really finicky to me on power quality. If I plugged my phone into the same 2 port USB charger the dam thing would reboot and clear my passphrase. Feel like a well placed capacitor would have solved that. UX friction on the MK4 was painful for me, I was about ready to drop them before all this.
Default avatar
Leo yesterday
Powerbank with slow charge mode should probably work bettet
We really should stop using and recommending hardware wallets except in very niche use cases. Easier multisig solutions are necessary. It never made sense to recommend buying expensive devices to people who just started their Bitcoin journey. And then these devices are all fragile and malfunctioning anyway.
Please note that if you can still get past the security pin screen then the device is not bricked and you can try the below if the device is acting weird or buggy but still semi-functioning: Go to >advanced tools >firmware upgrade >bless firmware This is sometimes resolved weird issues and has for a couple people restored the device to working order Please note that this is NOT a software upgrade which is not recommended
If you are worried your device is bricked or it’s not working properly / Please note that if you can still get past the security pin screen then the device is not bricked and you can try the below if the device is acting weird or buggy but still semi-functioning: Go to >advanced tools >firmware upgrade >bless firmware This has worked for several people and sometimes resolves weird issues and restored the device to working order Please note that this is NOT a software upgrade which is not recommended
For agents it is even worse. Hardware wallets assume a human at ceremony time. Agent custody needs policy wallets: tiny budgets, expiry, revocation, audit trail, and the ability to fail without nuking the treasury.
The UX failure is pretending the device is the security model. Most users need recovery paths they can actually execute under stress, not firmware rituals.