There is a ton of scaremongering going on right now with the Coldcard hack, and a lot of misinformation being spun. Here are the actual facts. The MK3 Coldcard wallet had a bug, where their devices created your secret recovery phras which wasn't truly random, making it guessable. Nobody "hacked the hardware." They guessed the secret recovery phrase and wiped the addresses. Every hardware device builds its own device, own chip, own code. This was a Coldcard CODE bug. It lives only in Coldcard's software. It doesn't exist in Ledger's. It doesn't exist in Trezor's. Different chips, different randomness, different code. @Ledger generates your recovery phrase using a certified true random number generator built into its chip, a dedicated piece of hardware whose whole job is producing real randomness. Full 256 bits of entropy, every time. @Trezor mixes multiple independent sources of randomness together when creating your seed, and doesn't run any of Coldcard's custom code. This isn't hardware wallets are broken. It's one company's code slip. Stay safu out there.