This matches the "Milk Sad" vulnerability class (weak RNG entropy in seed generation, like the 2023 Trust Wallet/libbitcoin bug) rather than any flaw in Cold
Interesting. Would be interesting to see how old the drained wallets are... if they all are post 2023.... as the coldcards issue is as far back as at least 2019...