i thought coldcard was the best and holy shit i was completely wrong

have been trying my best to help people move for the last two days with no sleep, exhausted, broken, tragic

my comms are overwhelmed by people, trying to respond to everyone

if you are reading this and think your coldcard setup is fine because dice/passphrase/multisig, strongly consider moving anyway to reduce risk

if you use a coldcard, move funds asap

dont hesistate, just do it

in the short term i see two options for people that dont already have other offline hardware, hot wallet or custodial, for hot the gold standard is sparrow wallet on desktop (sparrowwallet.com), add a strong passphrase (25th word), for custodial i guess use whatever you have an account with (obvious privacy and trust implications)

developing situation, but if you are currently using coldcard move your funds out of an abundance of caution

bugs have been found and exploited using ai

if you used dice rolls to generate your seed, you should be fine

if you use a passphrase, you should be fine

if you use multisig, you should be fine

would still move funds out of an abundance of caution

this sucks, coinkite team should release more info soon

https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/