<oembed><type>rich</type><version>1.0</version><author_name>jimbocoin (npub1v9…x9q3h)</author_name><author_url>https://nostr.ae/npub1v9qy0ry6uyh36z65pe790qrxfye84ydsgzc877armmwr2l9tpkjsdx9q3h</author_url><provider_name>njump</provider_name><provider_url>https://nostr.ae</provider_url><html>The problem affects single-sig wallets generated by the ColdCard from March 2021 onwards.&#xA;&#xA;Defenses include:&#xA;- Roll your own seed words offline&#xA;- Add entropy to seeds (dice)&#xA;- Use a passphrase (25th word)&#xA;- Use multi-vendor multisig&#xA;&#xA;While it’s fine to change vendors, just changing vendors but sticking to single sig doesn’t protect you from future vulnerabilities like this being discovered.&#xA;&#xA;The single, fastest, easiest mitigation is to roll a new seed with your own entropy and sweep your coins into it.</html></oembed>