Fake "coordinated hardware audit" emails are steering holders to a cloned Coldcard site that installs remote-access software.

A Coldcard Mk3 firmware flaw drained up to 1,082 BTC in 41 minutes. CZ urges users to split funds as self-custody confidence takes a major hit.

A Coldcard firmware flaw weakens wallet seed generation across five models, while Galaxy links a 1,196-address, $70.2 million sweep to the bug.