coldcard.com COLDCARD Firmware Update Introduces Codex32 and Shamir Backups
Article Content
- •COLDCARD firmware 5.6.3 and 1.5.3Q released with Codex32 support.
- •Codex32 allows splitting wallets into shares for enhanced recovery options.
- •No funds are moved during the splitting process, maintaining wallet integrity.
On October 1, 2026, COLDCARD released firmware versions 5.6.3 and 1.5.3Q, introducing the Codex32 format for encoding wallet secrets and supporting Shamir Secret Sharing. This update allows users to split their wallet into shares, enhancing backup and recovery options. The Codex32 format, defined by BIP-93, enables users to create between 2 to 9 shares with a configurable threshold for recovery. The update does not move funds or change wallet keys. Users are advised to securely manage their shares and verify recovery processes. The firmware also includes optional Seed Vault names for temporary seeds and various signing and parsing fixes. No vulnerabilities or were reported in relation to this update.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track Coldcard in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What is Codex32?
How does Shamir Secret Sharing work?
What should users do after the firmware update?
Continue Reading
Citrix NetScaler Critical Vulnerabilities Exploited: Urgent Patching Required Citrix NetScaler ADC and Gateway products are affected by critical vulnerabilities CVE-2026-88771 and CVE-2026-88772, both assigned a CVSS score of 9.5. The Cybersecurity and Infrastructure Security Agency (CISA) added these CVEs to its Known Exploited Vulnerabilities catalog on September 27, 2026, and mandated…
Critical Zero-Day Exploits Target F5 and Check Point Products F5 Networks released emergency hotfixes for a critical zero-day vulnerability, CVE-2026-94127, in its BIG-IP Access Policy Manager on September 22, 2026, after confirming active exploitation. This flaw allows unauthenticated remote code execution (RCE) and has a CVSS score of 9.8. Concurrently, Check Point disclosed…