Coldcard Halts Shipments After Firmware Vulnerability Exposes User Funds

Coldcard destroys vulnerable inventory and suspends shipments following a firmware flaw that compromised seed phrases, urging users to migrate assets immediately.

Woofun AI reports that Coldcard has destroyed all remaining inventory produced with vulnerable firmware and suspended shipments after a security incident exposed user funds. The company stated that some users lost years of savings, prompting the team to assist customers in transferring safe assets since last Friday.

The released patch prevents compromise of newly generated seed phrases, but old seeds created with the vulnerable firmware remain at risk. Users are advised to create new wallets and transfer funds, with officials recommending alternatives such as Bitkey, Ledger, Trezor, Jade, and Bitbox. Satscard, Opendime, and Tapsigner are unaffected.