🚨USERS HAVE NO BITCOIN LEFT AFTER THE COLDCARD HACK! Coinkite built Coldcard as a Bitcoin-only hardware wallet specifically to remove software-level trust from seed generation, and a single misconfigured macro undid that guarantee for five years! Block traced the fault to Coldcard's production config, which defined a hardware-RNG flag as disabled because Coinkite supplies its own wrapper, except the underlying library checked whether the macro existed rather than whether it was actually enabled. That silently bound builds to MicroPython's fallback random number generator, seeded from the chip's unique ID and timer state, collecting no fresh entropy after initialization. The practical result: Coinkite estimates effective entropy at roughly 40 bits on the Mk3 and about 72 bits on the Mk4, Mk5, and Q, compared to 128 bits for a standard 12-word BIP-39 seed. On July 30, an attacker used that gap to sweep 1,196 addresses in 41 minutes, taking 1,082.65 BTC worth $70.2 million. Coinkite shipped emergency firmware the next day for every affected model, but the fix only prevents future weak seeds. It does nothing for a seed already generated under the old code, and restoring that old seed to any wallet, patched or not, carries the weakness forward. The gap between a Coldcard owner who's safe and one who isn't is not whether they updated their firmware. It's whether the firmware running when their seed was originally created was ever vulnerable in the first place. Always keep your software up to date and remember vulnerabilities live everywhere!