WHALE WATCH : An attacker drained 1082 BTC ($70.2M) across 1196 wallets 30 hours before the Coldcard vulnerability was publicly disclosed. Someone had the zero day and ran a systematic sweep before the patch existed. That not opportunistic. That a coordinated operation. Update your Coldcard firmware now. Then check your entropy source. The hardware wallet is only as secure as the seed generation behind it.