---
title: "Abin da Kutsen Coldcard ke Nufi ga Masana'antar Cold Wallets"
description: "Kuskar entropy na Coldcard ya nuna dalilin da ya sa cold wallets suka dogara kan randomness, amincewa da firmware, binciken tsaro, da kuma canja wurin seed cikin taka tsantsan."
language: ha
published: 2026-08-15
author: Netts
topic: "Insights"
canonical: https://netts.io/blog/what-coldcard-hack-means-to-industry-of-cold-wallets?lang=ha
languages: [en, ru, es, zh, th, fr, uk, tr, hi, fa, ar, ha, pt, vi, ko, ja, id, de, tl]
translation_outdated: false
---
# Abin da Kutsen Coldcard ke Nufi ga Masana'antar Cold Wallets

Kuskar entropy na Coldcard ya nuna dalilin da ya sa cold wallets suka dogara kan randomness, amincewa da firmware, binciken tsaro, da kuma canja wurin seed cikin taka tsantsan.

Idan mutum ya ji kalmar cold wallet, yakan danganta ta da aminci. Kalmar kanta tana nuna kwanciyar hankali, tsaro, rashin yiwuwar shiga, da kuma killacewa. Hot wallets na browsing ne da kuma musayar kudi a exchanges; cold kuma na ajiya ne da kwanciyar hankali na dogon lokaci.

Wannan fahimtar ta girgiza sakamakon matsalar entropy ta Coldcard kwanan nan.

Abin ban mamakin shine bangaren da aka samu matsalar tsaro ba wata cutar phishing ta hot wallet bace, ko kuma wata muguwar manhajar MetaMask, ko ma wani adireshin deposit na exchange mara tsaro. Abu ne wanda masana crypto suka fi yarda da shi idan suna son yin magana kan kiyaye kudade cikin gaskiya da amana: hardware wallet ta Bitcoin-kadai. Wannan na'ura ce da masu amfani suka amince da ita wadanda suka dauki karin matakai don rage alaka da duniyar yanar gizo. Amma duk da haka, wasu daga cikin seeds da wannan cold wallet da ake ganin tana da kariya ta kirkira ba su da isasshen adadin entropy don tabbatar da cikakken tsaro.

Wannan matsala ce babba. Fashin hot wallet yana bata rai, amma sace entropy na cold wallet babban abin takaici ne da ke nuna cewa abin da ka saya don rage dogaro ga duniya har yanzu yana bukatar wani matakin amana a cikin firmware dinsa, build flags, random-number generators, tsarin binciken tsaro, ka'idojin fitar da sabbin software, da kuma dan karamin tazarar da ke tsakanin randomness dinsa na ciki da naka na kanka.

![Abin da Kutsen Coldcard ke Nufi ga Masana'antar Cold Wallets](https://netts.io/blog/images/body/da7d2bf6b3498815f5f52103c36d413488130c49-1272.webp)

Mafi yawan masu amfani da Coldcard da sauran makamantan hanyoyin cold storage ba su da zurfin ilimin yadda samar da random number ke aiki. A gare su, jerin kalmomi goma sha biyu (ko ashirin da hudu, ko duk abin da ya kasance) da ke kan allo wani sirri ne mai alfarma. Suna rubuta kalmomin a takarda, suna boye kalmomin, kuma ba sa taba buga kalmomin a kusa da kowane shafin yanar gizo ba tare da duba adireshinsa sau biyu ba. Suna yin duk abin da ya dace. Sai dai kuma, matsalar Coldcard ta zama jan kunne cewa duk amfanin cold wallet yana lalacewa idan random seed na walat din bai kasance ainihin bazuwar (random) ba. Wannan shi ne dalilin da ya sa kalmar da mai amfani yake gani a matsayin wata hanya ta tsaro da ba za a iya shiga ba za ta iya cin amanarsa a kowane lokaci.

## Yadda Amintacciyar Kalma ke Zama Abin Da Za A Iya Hasashe

Ya kamata amintacciyar kalma ta kasance bazuwar (random). Ga daidaitaccen seed na BIP-39 mai kalmomi 12, hakan na nufin samun bits 128 na entropy a cikinsa. Wannan lambar na iya zama kamar tana da girman gaske da ba za a iya tunani ba, amma abu ne na yau da kullum a fannin cryptography, kuma saboda kyakkyawan dalili: lamba mai girman haka ba za a iya hasashenta ba, koda kuwa mahari zai yi amfani da duk kayan aikin da yake da su. Mutum ba zai taba kokarin amfani da brute-force akan key mai bits 128 ta amfani da kwamfutar yau da kullum, botnet, quantum computer, ko ma hadin gwiwar duka ukun ba. Koda yake ana sa ran cold wallet ta fi hot wallet tsaro, wadannan ka'idoji guda daya ne suke aiki akan random number generator dinta.

Matsalar Coldcard ba wai cewa BIP-39, Bitcoin, ko cold wallets gaba daya ba su da tsaro bane. Tsarin aiwatarwar ne, musamman matsalar lokacin ginawa (build-time issue) wanda ya sa wasu daga cikin na'urorin da abin ya shafa suka yi amfani da deterministic software-based random number generator maimakon cryptographically secure hardware random number generator don samar da seed din. Wannan na iya zama kamar bayanin fasaha ne mai zurfi, amma ma'anarsa a fili ita ce na'urar ta yi amfani da kasa da adadin entropy da ya kamata lokacin da take kirkirar random seed.

A kan na'urorin Mk2 da Mk3 da abin ya shafa wadanda ke aiki da firmware 4.0.1 zuwa 4.1.9, an kiyasta adadin bits na entropy a cikin seed da aka kirkira ba tare da isassun jefa dice ba ya kasance kusan 40. Don fahimtar wannan, bits 40 na entropy ya isa ga random number generator mai tsaro a ka'idance ya samar da yiwuwar sakamako 1 cikin biliyan daya (trillion). Ba abu ne mai yiyuwa ba a iya hasashen irin wannan lambar, musamman idan maharin yana da wasu bayanai game da ita ko zai iya amfani da wasu kayan aiki don takaita hanyoyin bincike. A kan sabbin na'urori, amma wadanda matsalar ta shafa har yanzu, wato Mk4, Mk5, da Q, adadin entropy ya kasance tsakanin bits 40 da 72 tare da wasu kiyasin cewa ingantaccen sirrin entropy din yana kasa da bits 56.

![Abin da Kutsen Coldcard ke Nufi ga Masana'antar Cold Wallets](https://netts.io/blog/images/body/22c87c46d9ef062567b00f51b1e220c8a9f0976a-721.webp)

Wannan bambanci ne mai muhimmanci, domin yana nuna dalilin da ya sa matsalar ta shafi wasu daga cikin masu amfani da Coldcard ba duka ba. Na'urorin Mk2 da Mk3 masu karancin entropy sune a rukunin gaggawa na hadari, yayin da na'urorin Mk4, Mk5, da Q suka kasance masu rauni kawai. Duk da haka, ga masu amfani da suka mallaki na'urorin da abin ya shafa, babu abin da za su iya yi a kai face sabunta firmware zuwa sigar da aka gyara, kirkirar sabon seed da ita, tabbatar da adireshin karba, tura dan karamin kudi zuwa gare shi, sannan a kwashe sauran. Tsari ne mai gajiyarwa, amma a kalla yana tabbatar da cewa ba a amfani da tsohon seed mai rauni wajen ajiye wata kadara ba.

Amma ga bangaren da yawancin masu amfani ba za su so ji ba: sabunta firmware ba ya gyara tsohon seed mai rauni. Ana kafa randomness ne a daidai lokacin kirkira. Idan aka kirkiri kalmar a hanyar da ba ta dace ba, sabuntawa na gaba ba zai kara wa tsohon entropy karfi ba. Hanyar warwarewa guda daya tilo ita ce a sabunta, a kirkiri sabon seed akan firmware da aka gyara, a duba backup da adireshin karba, a yi karamin hada-hadar kudi, sannan a mayar da duka kudaden.

Bambancin yana tabbatar da ka'idar. Wanda ya kirkiri seed ta hanyar jefa private dice a kalla sau 50 ana daukarsa a matsayin wanda ya cire key dinsa daga hanyar randomness ta cold wallet din. Isasshen passphrase mai karfi na BIP-39 yana aiki a matsayin karin kariya amma baya magance matsalar seed mai rauni. Yana kama da ajiye akwatin kudi a cikin wani akwatin kudin, amma wanda ake budewa da skeleton key kawai. Tabbas, ya fi babu, amma har yanzu akwatin kudi ne a cikin wani akwatin kudi.

## Me Yasa Mahara Ke Son Cold Wallets Su Kasance Da Kurakurai

A kallo na farko, cold wallets ba su da dadi a matsayin kofofin kai hari. An tsara su ne su kasance offline, a killace daga browser, kuma ba sa fitar da private keys a cikin network stack.

Wannan shi ne dalilin da ya sa suke da matukar jan hankali. Cold wallets na dauke da makudan kudade. Mai amfani ba ya tura kananan kudade daga hardware wallet; yana tura ragowar ne, asusun lada, gadon da aka bari – tsabar kudi da za su kwanta shekaru da dama. Mai mallakar cold wallet ba lallai ne ya rika bibiyar kasuwa sosai ba; mai yiwuwa bai san game da race condition ko cinkoson mempool ba. Mai yiwuwa bai duba shafin Twitter na kamfanin da ya kera walat din ba don ganin sabon gargadin tsaro. A takaice, idan kudaden suka dade a cikin cold wallet, hakan na kara bude kofofin da za a iya kai hari.

Mai laifi yana da kwadayin kirkirar irin wannan harin. Irin wannan matsalar tsaro guda daya tana iya shafar daruruwan ko dubban masu amfani a lokaci guda. Dole ne a tsara dabarun phishing a tsanake; dole ne a yada malware; dole ne kiran bogi na tallafi ya shawo kan wanda ake son cuta ya bada dama. Amma idan aka sami raunin randomness, da zarar an hasashta, tana ba mahari damar kirkirar seeds da ake tsammani, ciro adireshi daga gare su, bincika blockchain don gano masu dacewa, da kuma tura kudade. Babu bukatar yin kutse a kwamfutar mai amfani; babu bukatar jefa wanda ake son cuta a tarko. Abin da maharin yake bukata kawai shi ne ya rubuta shirin da zai binciki walat masu rauni a kan blockchain.

Wannan shi ne dalilin da ya sa raunin entropy ke da matukar hadari. Private key yana da tsaro ne saboda babu wanda ya san da shi; ba boye yake ba, amma ba za a iya kaiwa gare shi ba saboda filin binciken yana da girma da yawa. Amma idan aka rage filin binciken, maharin zai yi hakurin nemo ainihin key din.

Ta yaya maharin zai iya samun sa? Akwai hanyoyin kai hari daban-daban, amma mafi ban sha'awa shine cewa babu wasu kwarewa na musamman ko kayan aiki na musamman da ake bukata. Firmware na Coldcard a bude yake a fili; masu amfani da hardware wallet da masu binciken tsaro suna tattauna bayanan su a bayyane. Mahari zai iya nazarin code, duba build scripts, da kuma kokarin gano abin da ya samu matsala. Wata hanyar kuma ita ce nazarin bayanan da ke a bude ga jama'a: idan mahari ya gano game da walat da aka kwashe mata kudi, zai iya neman sauran walat masu rauni. A karshe dai, blockchain wani database ne na adireshi da hada-hadar kudi, don haka hasashen adireshin zai ba maharin damar bincika ko walat din na da kudi.

Akwai dalili na uku da ke sa a nuna sha'awa ga cold wallets: masu amfani da wadannan ayyukan galibi masu himma ne a fannin fasaha. Masu amfani da Coldcard mutane ne da suka fahimci tsarin Bitcoin sosai, wadanda mai yiwuwa suna da ajiya mai yawa fiye da matsakaicin mai son crypto. Sun bambanta da 'yan caca marasa tunani; suna da kyakkyawar fahimta game da hadurran kuma suna daukar su da sane. A takaice, masu amfani da cold wallet suna daukar tsarin self-custody da muhimmanci sosai, kuma matsalar tsaro a daya daga cikin wadannan ayyukan babban barazana ce ga kudadensu.

Halin tattalin arziki na harin ma ya bambanta. Barawo na yau da kullum ba zai iya fashin gidaje 500 a lokaci guda ba; dole ne ya bi gida-gida. Kungiyar phishing dole ne ta nemo mutane 500 da za su mika private keys dinsu ga shafin yanar gizo na damfara. Amma maharin da ya sami matsalar tsaro a cikin cold wallet kawai yana bukatar ya rubuta shiri guda daya ne wanda zai bi duk walat masu rauni a blockchain ya kwashe musu kudi. Ba a bukatar wanda za a cutar ya yi komai; baya bukatar ya danna link ko ya rubuta key. Abin da kawai zai yi shine barin kudadensa a cikin walat mai rauni, wanda, abin bakin ciki, abu ne da ya zama ruwan dare.

![Abin da Kutsen Coldcard ke Nufi ga Masana'antar Cold Wallets](https://netts.io/blog/images/body/9158ac33be2e20c412508a5ae2211a4e6884ed8e-731.webp)

Wannan yana haifar da wani sabon kalubale ga mai amfani da cold wallet: tantance lokacin da seed mai rauni zai daina zama barazana. Wata daya ya wuce tun hada-hadar karshe, kuma babu abin da ya faru. Shekara guda ta wuce, babu abin da ya faru. Idan mai amfani ya san cewa seed din yana da karancin entropy, da ya kwashe kudaden tuni. Amma har sai an yi kokarin cire kudi na farko, mai mallakar cold wallet yana cikin kwanciyar hankali na karya.

A nan ne bayyananniyar blockchain ke zama babban taimako ga mahari. A mafi yawan laifuffuka, mai laifi dole ne ya fara nemo wanda zai cutar. Mahari dole ne ta wata hanya ya gano inda kudin suke: a dakin ajiya na banki, a walat ta cryptocurrency, ko a tsabar kudi. Amma game da Bitcoin, tsarin ya bambanta: maharin kawai yana bukatar ya hasashen private key ne, bayan haka kuma zai iya duba blockchain don ganin adireshi da hada-hadar kudi. Ma'ana, gaskiya da bayyanar da blockchain ke da shi babban amfani ne ga mai laifi idan zai iya takaita filin bincikensa.

Wani abin kuma da ke tasiri ga maharin shine mai amfani da cold wallet da kansa. Masu amfani da hardware wallet sun fi kowa sanin dabarun tsaro na kayan aikinsu. Sun fi nuna sha'awar shiga muhawara a bainar jama'a game da tsaron cryptocurrency, gudanar da bincike na kansu, da buga kasidu. Wannan ba abin mamaki bane: wadannan masu amfani suna ba da lokaci da kokari mai yawa don tabbatar da cewa kadarorinsu suna da cikakken tsaro. Amma wannan kuma yana nufin cewa suna samun matukar takaici da bacin rai idan aka sami matsalar tsaro a daya daga cikin kayan aikin da suke matukar girmamawa.

## Abin da Ya Rushe Amana Ce, Ba Kawai Randomness Ba

Bai kamata martanin masana'antar ya takaita ga jadawalin sigogin firmware kawai ba – jadawalin na da muhimmanci, amma babban ciwon da ya kamata a warkar shine amana.

Kamfanonin hardware wallet suna sayar da ra'ayin rage dogaro ne, amma ba kawar da shi gaba daya ba – mai amfani har yanzu ya dogara da abubuwa da dama: masana'anta, chips, firmware, bootloaders, tsarin ginawa (build systems), binciken budaddiyar manhaja (open source), sassan da ba a bayyana ba (closed source), takardun bayani, marufi, rarrabawa, har ma da amincin duk wadanda abin ya shafa. Tallan su yana cewa “kar ka amince, ka tantance,” amma mai amfani na yau da kullum ba zai iya bin diddigin matakan daga sautin jiki da ke cikin chip zuwa ga seed phrase da ke kan allo ba.

Wannan ba munafunci bane – amincewa ce cewa tsaro wani tsari ne na amana da ke jone da juna. Masana'antar tana da dabi'ar kuskure ta hada kalaman tallace-tallace da ainihin tsaro.

![Abin da Kutsen Coldcard ke Nufi ga Masana'antar Cold Wallets](https://netts.io/blog/images/body/daf4faf0804c3a402d840465fe54835d904b94e3-1270.webp)

Bayyanar matsalar Coldcard ta taba wani bangare mai zurfi a yarjejeniyar da ke tsakanin mai amfani da cold wallet: ‘Zan dauki alhakin ajiye tsabar kudina – zan rubuta seed, ba zan adana shi a iCloud ba, ba zan bayar da shi a Telegram na phishing ba, ba zan kashe shi a exchange ba. A madadin wannan alhaki nawa, hardware wallet dole ne kada ta kunshi wata matsala da za ta ba da damar fitar da sirrina daga ikona.’ Alhakin kamfanin hardware wallet shine saukaka wannan amana: kirkirar sirrin da zai ci gaba da kasancewa a boye koda kamfanin da kansa ya fuskanci barazana. Idan kamfanin ya gaza a kan babban aikinsa, to jajircewar mai amfani ba ta da wani amfani.

Wata kila wannan ne ya sa masana'antar ke jin matukar kyamar batun “kuskuren entropy” – a wata fuskar, hakan wani zargi ne ga duk akidar crypto. A wajen harin phishing da ya yi nasara, masana'antar za ta iya nuna kuskuren mai amfani – kuma gaskiya hakan na da zafi, amma yana da ma'ana. Mai amfani da ya fada tarkon damfarar phishing bai kare kadarorinsa ba duk da cewa yana da damar yin hakan – iko yana hannunsa. Sai dai kuma, a batun kuskuren entropy, mai amfani na iya yiwuwa ya yi duk abubuwan da suka ‘dace’ amma duk da haka ya fara da tubali mai cike da matsala. Ya kasance mai kiyaye dokoki yadda ya kamata a shirye-shiryensa, amma raunin yana cikin ainihin shirin ne – ya ci amanarsa a daidai lokacin da ya fi dogaro da shi.

Wannan yana dora sabon nauyi mai girma a kan masana'antun kera cold wallet: ban da kayan aiki (hardware) da tsarin amfani (UI), ‘tantance tsaro’ a yanzu ya zama daya daga cikin muhimman ginshikan amana. Masu amfani suna son damar tantance fuskokin allo, QR codes, hanyoyin sadarwa marasa waya (air-gapped), bangarori masu kariya (secure elements), budaddiyar manhaja (open source code), ajiyar karfe (metal backups), manhajojin waya, da marufi – kuma a yanzu suna son damar tantance tsarin kirkirar seed. Duk wani abu daban ado ne kawai idan asalin hanyar da ake samun randomness din ta samu matsala.

Masana'antar a yanzu tana bukatar ganin karin kariya da suka shafi entropy: reproducible builds, binciken tsaro na firmware, shaidun gwaji na fili da binciken lokacin aiki, tsauraran binciken lokacin ginawa, da raba randomness na lokacin ginawa da na lokacin aiki, da kuma kyakkyawan rarrabuwa tsakanin hanyoyin samun entropy na hardware da na software. Haka kuma za a sami sauyi zuwa multisig, a matsayin fasaha da kuma fannin amfani – ba kawai a matsayin zabi ga masu tsananin tsoro ba. Tsarin sa hannu biyu (two-signature setup) ta amfani da na'urori daban-daban da/ko kamfanoni daban-daban zai baiwa mai amfani damar jure kuskuren kamfani guda, idan har ya yi amfani da na'ura mai ‘kuskure’ a daya kawai daga cikin na'urorinsa. Wannan ba cikakkiyar mafita bace ga kowa, amma ta fi babu nesa ba kusa ba idan aka zo batun manyan kurakurai kamar kuskuren entropy.

Dole ne kamfanonin kera cold wallet a yanzu su gyara dabarun sadarwarsu – ‘don Allah a sabunta firmware’ ba wai sako ne kawai na yau da kullum cewa ‘wani abu ya sami matsala’ ba. Mai amfani na yau da kullum ya saba da fahimtar cewa ‘sabunta firmware’ na nufin ‘abubuwa za su yi kyau’ – amma a gaskiya, sabuntawa yakan gyara amfani da na'urar ne kawai a nan gaba, wato kirkirar seed na gaba. Dole ne mai amfani ya dauki matakin da ya fi wancan zurfi sosai: kirkirar sabon asali don kudinsa tare da kwashe su zuwa can. Wannan yana jefa mai amfani ga kudaden hada-hadar (transaction fees), hadarin tantance adireshi, hadurran backup da dawo da kudi, hadarin gado, da kuma hadarin yin kuskure a cikin gaggawar da yake yi don ‘gyara abubuwa’. Kamfanonin da suka fuskanci babban kuskure na ciki kamar na entropy dole ne a yanzu su rika magana da masu amfani da su kamar masu kula da rikicin gaggawa ba kamar kamfanonin software na yau da kullum ba.

Haka kuma akwai babban hadari na rayuwar kasuwanci ga kamfanonin da ke sayar da na'urorin cold storage: darajar da suke bayarwa ta dogara ne sosai kan amincewar masu amfani da cewa kamfanin na nuna tsananin taka tsantsan a madadin su. Kuskuren entropy guda daya zai iya mayar da masu siyan cold wallet daga abokan ciniki zuwa masu shakka – domin kuwa, ba abin mamaki bane idan aka zaci cewa sauran manyan matsaloli masu zurfi na iya kasancewa a ciki. Masana'antar ba za ta canza hanyoyinta ba saboda wata badakala guda daya: kowane babban abu a cikin duniyar crypto ta zamani yana cike da sassauci da koma-baya, kuma babban tunanin kowa shine cewa babu wanda zai iya samun cikakkiyar kwarin gwiwa a kan komai, shikenan. Sai dai kuma, tsammanin da ake da shi a bangaren cold storage ya fi girma sosai – nauyin zuciya da aka dora a kan cold wallets ya fi zurfi, kuma masu amfani ba wai kawai suna nuna shakku kan tsaron kamfanonin ba ne – suna cikin halin hadari ne. Kuskuren entropy guda daya zai sa kowa a cikin wannan sana'ar ya fahimci dalilin da ya sa cold wallets ba su zama kamar sauran kayan crypto ba – masu amfani da su suna shiga wani yanayi na daban a zuciyarsu, kuma da yawa daga cikinsu suna da rauni a hanyarsu ta musamman.

Irin wannan nauyi na zuciya yana kan masu amfani da multisig – fasahar tana da cikakken tsaro ba tare da shakka ba, amma tana da matukar wahala da hadari a matakin mutum: akwai karin rubutu, karin aikin backup, karin abin da za a iya rasawa, da kuma karin abin da za a gada. Ba za mu iya kawai cewa kowa zai iya amfani da multisig kuma ya dogara da ita don samun karin tsaro ba – a wani lokaci, wannan dabarar za ta iya fara korar masu amfani maimakon taimaka musu. A wani lokaci, masu amfani za su ji kamar duk tsarin yana son su zama kwararrun masana tsaro ne kawai ba komai ba.

![Abin da Kutsen Coldcard ke Nufi ga Masana'antar Cold Wallets](https://netts.io/blog/images/body/975ad1c6dbf7ff7d237eb46529b795edaf46b88b-748.webp)

Kuma ta haka muka zo ga ainihin matsalar dukan wannan yanayin – masana'antar cold wallet yanzu ana bukatarta da ta saita tsarin asali ya zama mafi aminci, ga masu amfani na yau da kullum, ba kawai ga wadanda ke jefa dice, karanta whitepapers, da tantance bayanan gini ba. Sha'awar jefa dice tana nuna tsantsar tsarin ne, amma kuma wata shaida ce ta mika wuya – ana bukatar matsakaicin mai amfani ya cike gibin da aka samu a masana'anta ta hanyar jefa dice. Wannan ba abu ne mai dorewa ba na dogon lokaci, kuma kuskuren Coldcard yana nuna dalilin da ya sa ya kamata masana'antar ta kauce daga irin wadannan hanyoyin.

## Karyar Cold Wallet Ta Fara Rage Girma

Cold wallets ba za su bace ba nan kusa – bayyanar matsalar Coldcard ba ta sa hot wallets sun zama amintattu ba, ko exchanges sun zama abin dogaro, ko kuma masu tsaron kudi na waje (third-party custodians) sun kubuta daga matsala. Kyawawan hardware wallets sun kasance daya daga cikin mafi kyawun hanyoyin da ake da su wajen yakar malware, satar kudi a clipboard, hare-haren da suka shafi browser, da sauran nau'ikan kutsen dijital. Ajiye keys a wajen yanar gizo (offline) ya kasance daya daga cikin manyan ginshikan tsaron crypto ga jama'a. Duk da haka, dole ne masana'antar ta gane cewa cold wallet ba wani katanga bane da ba za a iya shiga ba – a kowane mataki, dole ne mai amfani ya kasance a shirye don gudanar da binciken tsaro da kansa.

Lamarin Coldcard ya taba wasu daga cikin muhimman ka'idojin tsaro da masana'antar crypto ta yi imani da su – kuma dole ne masana'antar ta sake duba wadannan ka'idojin bisa la'akari da wannan. Hardware wallets da kuma keys dinsa ba su kubuta daga barazana ba, amma nauyin tabbatarwa dole ne ya kasance a wuyan kamfanonin – ba masu amfani ba. A nan gaba, kamfanonin hardware wallet za su fuskanci karin bincike mai zurfi game da randomness da sirri: masana'antar za ta bukaci kwararan hujjoji na randomness, binciken tsaro mai karfi, karin bayyana gaskiya, saitunan asali masu inganci, da kuma rarrabuwa mafi kyau tsakanin bangarorin hardware da software. Kowa zai so ya ga cikakken bayanin abin da ke faruwa idan aka sabunta firmware na walat – sabuntawar da kanta ba lallai ne ta shafi keys da ke akwai ba, amma kusan tabbas za ta shafi keys na gaba, kuma dole ne a duba wannan canjin a tsanake.

Zai kasance da matukar muhimmanci a rarrabe tsakanin “sabunta firmware” da “sauya seed (seed migration).” Na farkon wani tsari ne na yau da kullum da mai amfani ke yi – na biyun kuwa, ya kunshi babban nauyi sosai. Dole ne mai amfani ya fahimci cewa ikonsa na sabunta firmware ba ya nufin cewa ikonsa na sabunta sirrin yana aiki kai tsaye ba – a aikace, sauya seed yawanci ya shafi kirkirar sabbin keys gaba daya, wato tura kudaden daga wani rukunin keys zuwa wani. Wannan na iya hadawa da kudaden hada-hadar (transaction fees), matsalolin tantance adireshi, da sauran wahalhalu. Wannan shi ne dalilin da ya sa, idan aka fuskanci barazanar yiwuwar matsala a daya daga cikin walat dinsu, masu amfani da yawa suka fi son kwashe kadarorinsu zuwa wata walat a kan blockchain guda. Ta wannan hanyar, suna kaucewa duk kudaden canja wurin da hadurran – amma kuma, tabbas, ba sa cin gajiyar abubuwan alfanu da walat din mai ‘matsala’ ka iya bayarwa.

Dole ne masana'antar ta kula sosai lokacin da take sadarwa tare da masu amfani da ita – abubuwan da aka gano game da Coldcard babban jan kunne ne da ke nuna cewa dole ne masu amfani su rika tunani da kyau kafin su yi wani abu da kadarorinsu. Ya kamata kamfanonin su guji amfani da kalmomin fasaha masu rikitarwa – mai amfani da cold wallet na yau da kullum bai cika fahimtar yadda hardware da software ke alaka da juna ba. Ya amince da kamfanin don kiyaye kadarorinsa, kuma dole ne kamfanin ya tabbatar da wannan amana. Kamfanin kuma dole ne ya gane cewa ayyukansa suna da tasiri kai tsaye ga zuciyar da yanke shawarar masu amfani da shi – kuma dole ne ya yi aiki yadda ya dace. Idan aka zabi kuskure, sakamakon zai iya zama mai muni ga kowa.

Hardware wallet ba wai kawai wata na'urar fasaha bace – alkawari ne da mutane suka aminta da shi don kare lafiyarsu. Bayan abin da ya faru da Coldcard, ya kamata a sake nazarin wannan alkawarin sosai.

![Abin da Kutsen Coldcard ke Nufi ga Masana'antar Cold Wallets](https://netts.io/blog/images/body/b369921780827bd8879fb06b70059f603617a4b2-1242.webp)

Netts Workspace ya fito ne daga wata duniyar crypto ta daban, amma wani jan kunne ne da ke nuna cewa manyan ayyuka suna bukatar dashboards, iko, automation, da bayyana gaskiya maimakon rudanin duniyar crypto. Dandalinsu na gudanar da TRON Energy na kwararru yana bayar da damar hayar da hannu (manual rental), Smart Mode, Host Mode, sa ido, damar yin amfani da API, binciken AML, nazarin alkaluma, da kayan aikin kudi ga kungiyoyin da ke son fadada kasuwancin Energy dinsu yadda ya kamata. Ga kamfanonin da ke son yin amfani da TRON Energy API, USDT automation, sarrafa biyan kudi na TRON kai tsaye, ko kuma gaba daya, gudanar da ayyukansu na TRON Energy, yana da wuya a iya misalta muhimmancin dandamali kamar Netts Workspace.