For anyone not on Twitter. Please check out this tweet
There's a vulnerability with seeds generated without a passphrase or proper dice rolls on a Coldcard mk2/mk3. if you're in that category, check your wallet, prepare to move your funds, but do so carefully and don't panic.
Coinkite put out a post as well: 

X (formerly Twitter)
instagibbs (@theinstagibbs) on X
Confirmed. Mk2/3 vuln, I don't think mk4 is but can't be certain

COINKITE Blog
Coldcard Security Advisory
Funds from affected COLDCARD seeds are at risk if the seed lacks 50 independent, private dice rolls and the wallet lacks a strong, unique BIP-39 pa...



