Nunchuk Mitigates Coldcard Risk via Custom Key Derivation Logic

Nunchuk confirms platform keys are derived from Coldcard Mk4 seeds using custom logic to resist lookup table attacks, though long-term security is acknowledged as uncertain.

Woofun AI reports that Nunchuk has addressed the Coldcard vulnerability by clarifying that platform keys generated from Coldcard Mk4 devices are not used directly. The platform employs custom logic to derive independent keys, reducing susceptibility to lookup table attacks based on leaked seeds. Nunchuk noted that attackers may eventually incorporate these derived keys given sufficient time.