In regard the stolen Bitcoin, Tangem advice:
“Coldcard, what is going on?
An attacker swept roughly 594 BTC, about $38 million, out of around 500 separate Coldcard wallets between 01:31 and 01:56 UTC. Every single one held more than 0.15 BTC.
The attackers guessed the private keys, and they succeeded because the wallets were never random to begin with. Per Block's engineering team, a build setting told the device to skip its hardware randomness generator, and the safety check only tested whether the setting existed, not whether it was switched on.
So key generation quietly dropped to a software fallback seeded from the chip's serial number and clock registers. None of that is secret. The serial number is factory metadata, and the clock state is something an attacker can measure on their own device.
If you generated a Coldcard seed on an affected build, move your funds now.”
