At this juncture I would migrate funds off of any single-sig (or multi-sig of only) colcard wallets that were generated on-device without dice or passphrase.
quotingCOLDCARD Mk3 vulnerability: https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/
nevent1q…mzz6
