Reports of funds drained on coldcards happening years before the big heist are emerging by the dozen. The ceo of this company has a long history of shaming and ignoring people reporting issues with their products. Their bug bounty reward is basically a mug (look it up). And they have the audacity to tell you that the "hacker" could have done the right thing and responsibly disclosed. LOL.

https://wizardsardine.com/blog/coldcard-rng-vulnerability/

Narrator: It was, actually, the time to panic. If you hold bitcoin on any affected devices, please move your bitcoin ASAP to another wallet not issued by coinkite. If you still hold bitcoin on any coinkite product, I would strongly recommend moving them to another wallet as fast and as safely as possible. The full scope of the vulnerability cannot be known yet, and dice rolls/passphrased wallets generated on a coinkite device might not be safe. Lastly, if the CEO of a company issuing HWW is writing social media posts downplaying the issue instead of scrambling to check if there’s even 0.1% chance of a vulnerability actually affecting his products, this person and his company aren’t worth your trust nor money.