Praveen Perera

I traced Wave 1 of the Coldcard drain from the weak firmware RNG to 1,195 victim addresses, reconstructed 328 seeds covering 949.7 BTC, and found clues in the attacker’s sweep code.

The final 153 addresses remain unexplained.

https://praveenperera.com/blog/coldcard-mk3-weak-rng-wave1/

Cove 1.3.0 Beta is available on TestFlight and Google Play Open Testing.

The biggest feature is the new Passkey based Cloud Backup and restore. Onboarding and multi account import is also very cool.

Full CHANGELOG

Onboarding

• New setup flow for people creating their first wallet, importing an existing wallet, or restoring Cove
• Cove can now look for an existing Cloud Backup during setup
• New restore screens explain when a backup is found, unavailable, skipped, failed, or complete

Cloud Backup

• Brand-new Cloud Backup support in 1.3.0
• Back up Cove using iCloud Drive on iOS or Google Drive on Android
• Restore wallets with a passkey after reinstalling Cove or setting up a new phone
• View backup status, sync progress, passkey issues, and cloud access problems from Settings
• Disable or delete Cloud Backup when you no longer want it enabled

Wallet View

• Wallets now show scan progress while Cove checks transaction history
• Balances and transactions can appear before the full scan finishes
• Incoming unconfirmed funds are shown more clearly
• Scanning is faster and more reliable after retries, cancellations, or connection changes

Receive

• Receive now keeps the same address for 5 minutes unless it gets used
• Cove watches the current receive address for incoming payments
• The receive screen shows when payment activity is detected
• Cove warns before copying an address that has already received funds

Multi-Account Support

• Cove can now import separate wallets that use different Bitcoin account numbers
• Duplicate wallet detection now understands account numbers instead of treating every matching fingerprint as the same wallet
• Non-default account numbers are shown in wallet settings
• Wrapped SegWit, legacy, and no-fingerprint wallet imports are handled more accurately
• Cloud Backup and restore use the improved wallet identity checks too

Send

• Amount entry is stricter about unsafe pasted text, such as addresses or wrong unit labels
• Hardware send and PSBT handling received reliability fixes

Settings and Security

• New About screen with version, build, commit, and feedback details
• Local wallet data now uses stronger encrypted storage
• Seed phrase and sensitive backup screens have stronger screenshot protection on Android
• Settings now show clearer Cloud Backup, wallet, and security status messages

Reliability and Polish

• Updated wallet engine to BDK 3.0.0
• Better startup recovery if migration or restore is interrupted
• More consistent status colors and UI polish across iOS and Android https://blossom.primal.net/df9fc84e7fa39d7c2af225d59c84a6383ed4a09fc8a58a4e2806c8cad311ae1f.mp4

Open source in a post AI world needs web of trust, this nostrs time to shine

Vote on what Cove builds next

https://covebitcoinwallet.com/roadmap

Used MDK to build a way to vote on features that are on the Cove Walley roadmap.

DM if theres a feature you want that isn't on the list.

https://covebitcoinwallet.com/next-features

I was able to very easily setup a self custodial lightning based donation form for Cove, Money Dev Kit (MDK) makes its super easy!

Many bitcoin influencers got a lot of clicks and views talking about Epstien.

And how horrible his Island was.

If those same people aren’t talking about how Adam Back was on his island, that seems a little hypocritical, does it not?

https://bitpodsearch.com/search?q=Epstein&mode=hybrid

https://bitpodsearch.com/podcasts/rabbit-hole-recap/episodes/rabbit-hole-recap-365-open-water-bitcoin-returns?t=5076&highlight=1

So we’re all just ignoring that @adam3us went to Epstein’s island?

Especially because you probably like if anyone in the “fiat” world going there is persona non grata.

I guess bitcoin doesn’t fix being a spineless, feckless hypocrite

Pathetic.

Cove Android Beta finally available on the playstore!

https://play.google.com/store/apps/details?id=org.bitcoinppl.cove

I've been working on a proposal for a new way to do trustless, end-to-end encrypted backups of hot wallets for Cove using Passkeys.

I will work with

to turn this initial proposal into a proper spec.

Please give it look and give us any feedback you have

https://praveenperera.com/blog/passkey-prf-bitcoin-wallet-backup

UR is a terrible standard for QRs, it's actually terrible, needlessly complex and you always end up with more QRs than BBQr.

All hardware wallet manufacturers should switch to BBQr and please just let UR die.

With all that being said, UR support is coming to covewallet soon...

Watch only wallet is a weird term, and really accurate anymore, do people new to bitcoin still learn that term?

The irony of the privacy advocate doxxing people…

For everyone waiting for Cove Android, you can track our progress in GitHub, hoping to get a beta build out Nov 7th and launch December 1st

https://x.com/covewallet/status/1980308126760112369/photo/1

https://github.com/orgs/bitcoinppl/projects/1

Core and their supporters can eat a bag of dicks

Only shitcoiners, spammers and retards run v30

Cove is officially available on the App Store 🎉🎉🎉🎉

https://covebitcoinwallet.com/appstore

Cove has officially been submitted for review to the app store!!! 🥳🎉