Nunchuk Urges Immediate Multisig Migration Amid Coldcard Security Incident

Nunchuk advises immediate fund migration for multisig wallets with compromised Coldcard keys. New Slipstream integration aims to bypass public mempool and enhance transaction privacy.

Woofun AI reports that Bitcoin wallet provider Nunchuk has issued urgent guidance following a security incident involving Coldcard devices. Users holding multisig wallets with Coldcard-generated keys are advised to migrate funds immediately, particularly if the number of compromised keys meets the signing threshold. Even if the risk is lower because the threshold is not met, migration remains strongly recommended. For those unable to verify key counts, treating the situation as high-risk is advised.

Nunchuk announced that an upcoming mobile update will automatically enable the Slipstream channel for paid users, allowing transactions with Coldcard keys to bypass the public mempool. This measure aims to reduce exposure to transaction monitoring and replacement attacks. Free-tier users or those seeking immediate action can utilize a manual migration process by creating unsigned multisig transactions and submitting raw data via Slipstream.