coldcard issue

[Hasslong]

do electrum is in safe , entropy is ok , iam really concerning
what difference between entropy on coldcard , and electrum

[Mia Chloe]

do electrum is in safe , entropy is ok , iam really concerning
what difference between entropy on coldcard , and electrum

Entropy is basically randomness. In wallets and seed generation we use the word entropy to define how random your seed phrase actually is because the more random it is the harder it becomes to brute force or guess and the less random it is the easier it is to guess or brute force too.

As for ELECTRUM, it's his a wallet software and what kinda makes it stand out is it has it's own default seed dictionary slightly different from your regular BIP39. Lastly, Cold cards are a form of hardware storage.

[Charles-Tim]

As of now, the way Electrum generates seed phrase is safe. But if you are really not feeling secure with your coins on addresses generated on Electrum wallet, just create new wallet or wallets on Electrum with extended word (passphrase) and send your coins to the addresses of the newly generated wallet or wallets so that even if such Coldcard attack happen to Electrum users, your coins will still be safe.

[Stalker22]

Electrum itself is safe.  It is only unsafe if your Electrum wallet is just software layer for a coldcard hardware wallet OR if your seed phrase is generated on a coldcard hw, seedphrase which you imported into Electrum (and if so that depends on coldcard firmware at the time it was generated.) 

Theoretically, any software wallet or hardware device that generates seed phrases using a pseudo-random number generator (PRNG) could theoretically have an entropy bug in it.  But honestly this is really extremely unlikely if a piece of widely popular software like Electrum with a lot of ppl looking at the code would get such a problem.

[EL MOHA]

do electrum is in safe , entropy is ok , iam really concerning
what difference between entropy on coldcard , and electrum

I think your question is difference between the entropy for electrum and the affected entropy on cold card, the simple answer is randomness, the cold card which is an hardware wallet actually uses an hardware wallet random number generator (RNG) which the affected cold card wallets had entropy of 40 bits or 72 bits and this was considerably low because the standard for Bip-39 wallets is actually 128 bits entropy for 12 seed phrase and 256 bits for 24 words seed phrase, the 128 bits is considered save because private keys are also 128 bits entropy.

Electrum then uses your device operating system for random number generation (CSPRNG) that’s why it’s actually best to generate it in an offline environment. Electrum entropy is actually 132 which is safe and far higher than that of coldcard which is 40 bits or 72 bits

[BitMaxz]

As of now I have never experienced any issue yet on using Electrum, but Coldcard and Electrum have different ways to generate their seed phrase.

Electrum seed generation is based on CSPRNG, while Coldcard is based on a secure element TRNG, meaning they have different algorithms used to generate seeds.

You might be concerned about the trending news recently about ColdCard? I suggest try Electrum in cold storage; it is way safer than using hardware wallets like Coldcard if you make sure you will never connect it online.

If you look more about CSPRNG and TRNG, check this comparison between them

- https://crypto.stackexchange.com/questions/63555/what-is-the-difference-between-trng-and-csprng

[nc50lc]

do electrum is in safe , entropy is ok , iam really concerning

As far as I can tell, there's no issue in Electrum's seed phrase generation code below; Coldcard's firmware code had.
Link: github.com/spesmilo/electrum/blob/ebe20010111f00dad2d8bd52ac2a6030d3b26d8b/electrum/mnemonic.py#L201-L238
You might also need to get second opinion from others to make sure.

Also, its entropy is pretty strong with secrets.randbelow() method which is considered cryptographically strong.
Ref:

• github.com/spesmilo/electrum/blob/ebe20010111f00dad2d8bd52ac2a6030d3b26d8b/electrum/util.py#L2002-L2009
• docs.python.org/3/library/secrets.html

On a side note: future updates might introduce "extra entropy" to further "scramble" the entropy generated by the OS (in case the OS is not 100% safe)
But only if this is implemented: github.com/spesmilo/electrum/pull/8839