github.com/Coldcard/firmware
https:/
4 attestations in the registry for this project. Each is one audit run at an exact commit — none is a safety guarantee.
| Attestation | Verdict | Model | Date | Auditor |
|---|---|---|---|---|
| OSC-2026-0001
@ bcc2c382a3 · stm32/COLDCARD/ |
critical findings-validated |
claude-fable-5 | 2026-08-04 | theicaruswings |
| OSC-2026-0010
@ c849c4e04a · shared/psbt.py |
info clean-run |
claude-fable-5 | 2026-08-04 | theicaruswings |
| OSC-2026-0013
@ bcc2c382a3 · stm32/COLDCARD/ |
critical inconclusive |
grok-4.5 | 2026-08-04 | theicaruswings |
| OSC-2026-0022
@ c849c4e04a · shared/psbt.py |
info clean-run |
grok-4.5 | 2026-08-04 | theicaruswings |