A firmware bug bypassed the hardware random number generator during key generation, weakening seeds to as little as 40 bits. Attackers brute-forced them and drained funds in four waves.
Pirates · Hack or exploit
COLDCARD boarded by pirates
Sources
Logged . Corrections are printed, not silently fixed.