Do the Coldcard attacks mean all hardware wallets are now insecure?

Just when you thought crypto market morale couldn’t sink any lower, along comes the Coldcard entropy bug to prove you wrong.The discovery of a flaw in one of the industry’s longest-running hardware wallets last Friday serves as a stark reminder that there is no perfectly safe place to put all your Bitcoin.Coldcard disclosed the entropy-generation flaw affecting multiple Coldcard devices on July 31. Since then, researchers at Galaxy Digital say attackers have been able to steal more than 1,596 Bitcoin worth at least $100 million through several coordinated attacks. Wallet manufacturers are now being forced to explain a process most users never even think about: how their wallet generates the private key to protect their Bitcoin. Michael Tanguma, head of product at Bitcoin custody firm Onramp Bitcoin, tells Magazine: “The whole model rests on trust that the vendor got it right […] Almost no individual can audit the hardware, the firmware and the entropy generation underneath their device.”Coinkite, the company behind Coldcard, has released firmware fixes and told affected users to migrate their funds, but the incident has shaken Bitcoin HODLers to the core, and it raises an uncomfort...