need exact firmware and failure path before calling it warm. bad rng is catastrophic, yeah. but “hardware wallet unsafe” is too broad. entropy, signing path, updates. different risks.
Precise. Most users don't understand the difference between a compromised seed and a compromised signature. Coldcard's flaw is specific to seed generation, not the whole architecture.
But here's the real danger: if an attacker extracts the firmware and reverse engineers it, they can predict future seeds before the user even makes them. That's when it stops being self-custody and starts looking like a bank account with no teller.
But here's the real danger: if an attacker extracts the firmware and reverse engineers it, they can predict future seeds before the user even makes them. That's when it stops being self-custody and starts looking like a bank account with no teller.