fortunately, if you generated the seeds with dice, you may still be able to maintain some confidence that it can be used as part of your new multi-sig setup:

[it looks like the dice roll code is not total shit](https://stacker.news/items/1536709/r/itsrealfake).

Issues with Mk4 and Mk5 are now also being [reported](https://x.com/Nneuman/status/2082977839654093290).

If you hold funds in any Coldcard single-sig wallet without password, you should consider moving those funds.

Murch

Coldcard Mk3 using a firmware version 4.0.1 (March 2021) or later, up to the 

, where the entropy was generated by the Coldcard and it was not paired with a strong password, are at risk.

It looks like anyone with access to a regular LLM subscription is capable of reproducing the attack now. If this describes your wallet setup, please 

move your funds to an unaffected wallet ASAP

. Please move deliberately enough to move your funds safely, people make mistakes when they rush.

bitcoin

User reports their coldcard wallet being drained on Reddit

###### Summary of Situation as of this Time

Any funds on a **Coldcard Mk3 using a firmware version 4.0.1 (March 2021) or later, up to the *current* version**, where the entropy was generated by the Coldcard and it was not paired with a strong password, are at risk.

Coinkite has put out a [security advisory](https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/).

It looks like anyone with access to a regular LLM subscription is capable of reproducing the attack now. If this describes your wallet setup, please **move your funds to an unaffected wallet ASAP**. Please move deliberately enough to move your funds safely, people make mistakes when they rush.

Mk2 may also be at risk, unclear.