The ColdCard debacle I think is an important lesson here for Knotzis. The ColdCard bug came about because there was one person with his hands in the code and with very little review of what was being changed. There were also very few comments added for each commit which further complicated change control.
The Knots implementation of bitcoin node software suffers from the same problem. Luke is the sole maintainer and the way he maintains the Knots software in many ways mirrors a lot of the poor practices that resulted in the ColdCard bug.
The ColdCard vulnerability should be a wake up call for anyone running Knots for their bitcoin node.
Tyler Burns
npub1d3…xynp3
2026-08-05 12:47:14 UTC
Author Public Key
npub1d30mhvhd0sagmu83wdm26wqk00heptfn05xvgmfx7r9xscstnfcs7xynp3Published at
2026-08-05 12:47:14 UTCEvent JSON
{
"id": "00008a7c552447465d4e3bb6c8da83f1810db9e42fc154699e16129926c1f55c",
"pubkey": "6c5fbbb2ed7c3a8df0f17376ad38167bef90ad337d0cc46d26f0ca68620b9a71",
"created_at": 1785934034,
"kind": 1,
"tags": [
[
"client",
"Dark Wisp"
],
[
"nonce",
"39653",
"16"
]
],
"content": "The ColdCard debacle I think is an important lesson here for Knotzis. The ColdCard bug came about because there was one person with his hands in the code and with very little review of what was being changed. There were also very few comments added for each commit which further complicated change control.\n\nThe Knots implementation of bitcoin node software suffers from the same problem. Luke is the sole maintainer and the way he maintains the Knots software in many ways mirrors a lot of the poor practices that resulted in the ColdCard bug.\n\nThe ColdCard vulnerability should be a wake up call for anyone running Knots for their bitcoin node.",
"sig": "a64966060cc6a228ef3a779d23837481dc4dc6fd17b24c9cbe9c79b56a6fdd81063b87ee57ed88dda702990cef5e57c8117cc20ca8581851b9570f618b9a8c03"
}