UPDATE: Block's Max Guise says the team traced the Coldcard wallet drains to a random-number-generation flaw affecting Mk2 through Mk5 devices. Affected users are urged to move funds to a new, unaffected wallet as soon as safely possible.