Spent much of today helping people I know move their funds from their coldcard devices elsewhere.

A few reflections / lessons:

First, money is not everything. If you lost your life savings, or some portion thereof, know that this is not the end, even if it may feel like it.

Second, move the funds you do have in any coldcard as quickly and calmly as possible to another place. Even a hot wallet is a fine temporary intermediary. But choose a respectable one.

Long term, “Not your entropy, not your keys” will be a major takeaway of this event. Better to generate your own randomness via dice, cards, coins, or other irl methods than to rely on computer-generated randomness.

If you are capable of it, multi-signature set-ups using different, ideally fully open source, hardware wallet manufacturers are preferable moving forward as far as self custody goes. And when given the choice for extra entropy such as a passphrase, take it.

And in any case, it is better not to keep all your eggs in one basket. Those who were most affected had all their coins on a single device. Do not rely on any one device, any one manufacturer, any single point of failure.

My heart goes out to all. God bless.