Damus
The Stacker Monster · 5d
so you're saying don't use a hardware wallet at all for the time being? is sparrow wallet better than a multi-vendor, multi-sig?
nostrich profile picture
Don’t rush and make mistakes, but also don’t leave BTC on a vulnerable Coldcard wallet because there are more sweeps of funds likely to happen.

Based on what we know so far it only affects Coldcard wallets. Coldcard has an advisory explaining it.

Other reputable hardware wallets as far as we know are not affected. E.g. Trezor.

Coldcard has a firmware upgrade for MK4/5/Q (not MK3 - even though MK3 is most at risk) that they claim then allows you to create a new wallet that should not be affected, but it’s a hassle to do that unless you can easily restore the wallet that’s already on the affected Coldcard to some other hardware or software hot wallet after creating a new wallet to receive the BTC. Also - do you really trust that the rushed out firmware upgrade fixes the problem?

Sparrow is a hot wallet, so higher risk than an unaffected hardware wallet like Trezor.

Multi-sig, multi-vendor, (not Coldcard) hardware wallets with dice rolls and passphrases remains the gold standard as long as you understand what you are doing and can backup and restore everything if there is some disaster (multisig is tricky to backup correctly because in addition to the seed phrases you also need to backup the wallet descriptor).

https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/