Galaxy Research Director Again Reminds Coldcard of Risk: Single-Sign Wallets without Passphrases should be migrated immediately

Galaxy research director Alex Thorn once again issued a message warning about the risks of Coldcard wallets, saying that all single-signed wallets that use Coldcard firmware after March 17, 2021, do not have dice random entropy enhancement (dicerolls), and do not have a passphrase (passphrase) set should be migrated. Although the scope of risks needs to be further limited, users are recommended to migrate completely away from the Coldcard ecosystem unless they meet one of the following conditions: they have imported high-entropy random seeds from other sources, and used a large number of dice to generate random numbers to enhance seed security. AlexThorn added that attackers are currently continuing to discover and clear eligible wallet addresses. Although the risk of users using external high-quality random seeds or having been randomized with sufficient dice is relatively low, it is recommended that affected users not wait for the attack to occur and should complete asset migration in advance.