UPDATE: According to @glxyresearch the @COLDCARDwallet exploit is ongoing with over $88M being drained so far.
ALERT: 594 $BTC ($38M) has been drained from 500 @COLDCARDwallet hardware wallets in a 25-minute window, exploiting a flaw in how the device generated private keys.
The vulnerability traces to firmware 4.0.0 shipped in March 2021.
