A five-year-old Coldcard firmware bug let an attacker guess bitcoin seed phrases and drain 1,816 BTC from 5,200 addresses.
Users who generated seeds on affected Coldcard MK3 devices without dice rolls or a BIP39 passphrase must move funds ...