Coldcard’s offline design didn’t stop the theft: what the flaw actually was

A firmware bug fed the wallet's random-number generator too little entropy at the moment a seed was created. Because the flaw lived in that one step, an air-gapped device offered no protection — and a software wallet flagged separately by researchers shows the same weakness can t...