IMPORTANT ColdCard SECURITY UPDATE

— COLDCARD vulnerability disclosure: A serious randomness flaw has been found in some COLDCARD devices affecting Bitcoin seed generation. Users who relied on the device for entropy are at immediate risk.

— Risk assessment and mitigation: Users with 50+ private dice rolls or strong BIP39 passphrases face lower risk; however, the recommendation is to migrate regardless to eliminate uncertainty.

— Migration process: Five-step procedure outlined: generate new seed on unaffected airgapped device, verify backup, confirm fingerprint and address on hardware itself, send test transaction, verify full functionality before moving remaining funds.

— Alternative custody during transition: If self-custody setup takes time, temporarily moving Bitcoin to a trusted exchange or custodian is acceptable while establishing a secure new wallet.

— Scam exploitation warning: Fraudsters will attempt to exploit the disclosure. Never share seed words, passphrases, or enter them into websites, chatbots, or unsolicited tools. No legitimate helper needs your seed.

— Follow CoinKite updates: Check official COLDCARD disclosures and Twitter (@SaferDean) for ongoing vulnerability details and firmware-specific risk ranges.

— If you generated your COLDCARD seed using device randomness (not 50+ manual dice rolls), move your Bitcoin immediately to a new seed on an unaffected device or temporary custodian. Do not rush; verify each step.

— Verify wallet fingerprints and addresses directly on your hardware wallet or airgapped computer, never on an online device, and always send a test transaction before moving all funds.

— Retain your old seed backups and hardware until migration is fully complete and confirmed, as they may help prove ownership if a hacker is identified.