1,196 Coldcard cold wallets were drained of $70 million in 41 minutes. The attacker never touched a single device.
Here's how. A 2021 firmware bug made Coldcard skip its hardware random number generator and fall back to a predictable one, so the "dice" that generated your seed