Odaily Planet Daily reports: Yu Xian of SlowMist stated on X that in the ColdCard hardware wallet weak randomness security incident, if a passphrase was used with the mnemonic phrase, users could avoid this attack. A passphrase is not the wallet’s unlock PIN code, but a password specifically set for the mnemonic phrase, a feature supported by all major hardware wallets.
Previously, according to Lookonchain monitoring, approximately 500 wallets had their funds transferred to the address bc1qnk due to a vulnerability in Coldcard wallets, involving a total of 594.48 BTC, worth approximately $38.2 million.

