COLDCARD Vulnerability Reproduced by Bitcoin Core Developer
A COLDCARD MK3 vulnerability has been reproduced by Bitcoin Core developer instagibbs, who used button presses during setup to exploit it.
The issue may affect not only MK3 devices but also their predecessors, the MK2. However, it's still unclear whether the newer MK4 model is vulnerable.
Instagibbs' successful reproduction of the vulnerability prompted him to comment, 'Sorry, now is the time to panic.'
Antoine Poinsot, another developer, provided some context, stating that the key difference between the MK3 and MK4 lies in their random number generation methods. The MK4 uses a hardware random number generator, whereas the MK3 relies on the microcontroller's true random number generator.