According to CoinMeta, the vulnerabilities in the Coldcard devices were not traditional hacker attacks; there was no intrusion or phishing, and no one stole mnemonic phrases from the notes. These devices generated weak private keys over the past five years, resulting in Bitcoin flowing back to exchanges.