Nunchuk said some platform keys are generated by Coldcard Mk4 but are not used directly. According to ChainCatcher, the company said it derives separate keys through custom logic to make them less vulnerable to lookup-table attacks based on leaked Coldcard seeds. Nunchuk added that, given enough time, attackers may eventually include these derived keys as well.