Coldcard update: reported firmware RNG defect and secondary risks

What happened

The supplied record says a Coldcard firmware defect diverted key generation from the STM32 hardware random-number generator to weaker MicroPython entropy. It says Block engineers and Core developers traced roughly $130 million in losses to that reported defect.

The same record flags dormant coins moving, cloned-site phishing spreading, and OKX reporting record inflows to centralized exchanges. Together, these are presented as continuing secondary effects of the incident.

Why it matters

The update raises a practical self-custody question: whether users move keys or assets toward custodians after a hardware-wallet security event. The associated monitoring note identifies a possible shift between self-custody and custodians as the main development to watch.

Phishing adds a separate risk because cloned sites can target users responding to incident news. The record does not establish how broadly trust has changed or where assets ultimately settle.

What to watch next

Watch for further evidence on where retail keys migrate, whether hardware-wallet trust erodes, and whether the reported centralized-exchange inflows persist. Confirmed technical remediation and independently supported details on the reported losses would also be meaningful receipts.