Personally, I don't think so - This looks like Coldcard made a rushed refactoring back in 2021. See this blog post for details: https://insider.btcpp.dev/p/when-randombytes-runs-but-doesnt
As for "why now" - It's almost certainly because of AI. Kimi-K3 came out with open weights on Monday last week. The attack happens on Friday. AI didn't lead to the bug, but it did let some script kid actually find and exploit it.
"Never attribute to malice that which is adequately explained by stupidity."
- Robert J. Hanlon
DireMunchkin
npub1mx…kkyq5
2026-08-03 11:00:34 UTC
in reply to nevent1q…te0v
Author Public Key
npub1mxrt3fyvaay4plrz7lwzurf80jjs2atmt2nn7z2ekgr9necl0jkqekkyq5Seen on
wss://relay.nostr.netPublished at
2026-08-03 11:00:34 UTCEvent JSON
{
"id": "394de98a13624073c0f34b4efe7a25679d71359fc54f40852580b737b79aa99b",
"pubkey": "d986b8a48cef4950fc62f7dc2e0d277ca505757b5aa73f0959b20659e71f7cac",
"created_at": 1785754834,
"kind": 1,
"tags": [
[
"e",
"e302ad95197101400b528ed02b87390822030003c980230046dfc4e40efe65a2",
"wss://relay.primal.net/",
"root",
"846307688a09ec112967eb0544e78a9e88c48f50712c39ed491ff2b6fa019ae8"
],
[
"p",
"846307688a09ec112967eb0544e78a9e88c48f50712c39ed491ff2b6fa019ae8"
]
],
"content": "Personally, I don't think so - This looks like Coldcard made a rushed refactoring back in 2021. See this blog post for details: https://insider.btcpp.dev/p/when-randombytes-runs-but-doesnt\n\nAs for \"why now\" - It's almost certainly because of AI. Kimi-K3 came out with open weights on Monday last week. The attack happens on Friday. AI didn't lead to the bug, but it did let some script kid actually find and exploit it.\n\n\"Never attribute to malice that which is adequately explained by stupidity.\"\n- Robert J. Hanlon",
"sig": "c1cd260b036c66814ea14c5fae7fdb97bea5d9ee4f149cb13408a2d25ff93f2f803a56b0f7778b6bd0397724e75ce1b2247f2739abc5ce8417a11d53741d35dc"
}