Coldcard

Scope: this dataset covers Coldcard Mk2 and Mk3 on affected firmware 4.0.1 to 4.1.x, for seeds created without a BIP-39 passphrase and without added dice rolls. Mk4, Mk5, and Q are also affected, but use additional hardware entropy and are not included in this dataset.

The dataset contains 61,534 addresses from 2,797 weak seeds, covering Bitcoin and Ethereum/EVM.

Direct derivation:

• P2WPKH — m/84'/0'/0'/0/{0,1,2} — BTC
• P2PKH — m/44'/0'/0'/0/{0,1,2} — BTC
• P2SH-P2WPKH — m/49'/0'/0'/0/{0,1,2} — BTC
• ETH — m/44'/60'/0'/0/0 — EVM

BIP85 (index 0): 4 derivations:

• WIF — 83696968'/2'/0' → P2WPKH / P2PKH / P2SH
• XPRV — 83696968'/32'/0' → m/{84,44,49}'/0'/0'/0/0
• 12-word — 83696968'/39'/0'/12'/0' → m/{84,44,49}'/0'/0'/0/0
• 24-word — 83696968'/39'/0'/24'/0' → m/{84,44,49}'/0'/0'/0/0