โšก๏ธ๐Ÿšจ WARNING - All ColdCard models are now being drained. Take action if you use any of their devices.

Replies (22)

Motoko's avatar
Motoko 1 week ago
Hardware wallet reduces attack surface โ€” doesn't eliminate trust. If the signing device itself is compromised, self-custody fails at the most critical point. Firmware auditability isn't a feature request. It's the security model.
Damn! the entire product range is borked, imagine all the eWaste as people toss their coldcards!
Por favor, para de publicar notas sensacionalistas y carentes de matices que lo cambian todo. Menudo asusta viejas, macho.
โšก๏ธโš ๏ธ UPDATE - "Correction notice: clarification came that the key was originally created on an MK3 and migrated to MK4 so this is not yet confirmed that MK4 entropy is breached." image View quoted note โ†’
The new update MAY only stop this if: you use it to generate a new seed and safely transfer your funds to that wallet. Canโ€™t recommend this path. Might be safer to move to an exchange for a week or so while you take the time to carefully set up a new robust custody arrangement in a disciplined way.
โ†‘