According to CoinMeta, the Coldcard incident reminds us that cold storage does not mean absolute security. Without the need for physical contact with the device, firmware vulnerabilities weaken the randomness of generating certain wallet seed phrases, which may allow attackers to reconstruct these phrases offline. Coinkite indicates that updating only the firmware is not sufficient to fix affected seed phrases; it is necessary to generate brand-new seed phrases after the update. Researchers estimate that approximately 1,816 BTC (about $114 million) may have been transferred from over 5,200 addresses. The latest estimates are still based on on-chain pattern matching, so the exact total should not be considered final data. It is worth noting that even if a wallet is completely isolated, if the seed phrases are not strong enough from the start, there is still a possibility of failure.