Critical Coldcard flaw: what happened, who is affected, and what to do
Summary
This article analyzes a critical entropy vulnerability in Coldcard hardware wallets (MK2–Q) that allowed seeds to be compromised due to a misconfigured RNG chain. It details which models are affected, the risk to Liana multisig setups, and concrete remediation steps including firmware fixes, seed migration, and adopting multi-brand multisig to reduce single-point entropy failure.