A critical bug has been discovered in Coldcard hardware wallets MK3, MK4, MK5, and Q that allows attackers to recover users’ seed phrases. Only wallets generated using the dice roll method with 50 or more dice are safe, all others generated after the end of 2020 are vulnerable. Approximately 1,000 BTC have already been stolen through this actively exploited flaw. Coinkite, the manufacturer, recommends immediately transferring funds to a new secure seed or another hardware wallet. A firmware patch has been released to secure future seed generations.
Source: Read the original article
