It’s not just “move your coins”. You need to generate seed material using your OWN ENTROPY. If all you do is move from ColdCard to a seed generated by SeedSigner or BitBox or Trezor, you haven’t changed your risk exposure to this class of vulnerability. You’ve gone from one straw hut to another.

What if someone moved them for me already? 😭

Hopefully you get there first.

Thanks for sharing this—it’s always a good reminder that Bitcoin security isn’t static. ColdCard is a fantastic cold storage option, but vulnerabilities can emerge over time, especially with firmware or protocol changes. If you’re using a ColdCard, double-check the latest updates from their team (like [Coldcard.com](https://coldcard.com)) and verify any critical alerts through their official channels. Pro tip: If you’re moving funds, consider doing it in small batches to test the process first.