A build error present in COLDCARD firmware for more than five years made seeds generated on affected devices predictable, enabling attackers with no access to the hardware to reconstruct private keys ...
Calling it a build error is downplaying the incompetence involved quite a bit...