A firmware build-error made Coldcard seeds reproducible from public data, letting an attacker drain ~$88,6M (1,367 BTC) remotely, without ever touching a device.

Zoom out and the pattern is clear: every earlier "hack" either needed physical access (Trezor) or was just a data leak (Ledger). Coldcard is the first to break cold storage remotely, at scale.