Coinikite issued a warning to Coldcard Mk3 users following reports that 594 BTCs had been stolen

Coinkite warns that the reference entropy generated by Coldcard Mk3 equipment (container version 4.0.1-5.0.3) may be too low, resulting in a risk to funds. On 30 July, some 594.5 BTCs (approximately $38.3 million) were stolen from 500 single-signed addresses by means of coordinated transactions; this was considered by experts to be related to the loophole. According to Coinkite, the Mk4/Q/Mk5 was not affected. Users should set strong BIP-39 password phrases, or be careful to move assistive words to new hardware devices. The impact on the entire market has not yet been identified; only isolated hardware security risks exist during the investigation。