Coldcard Adds Security Measures After $130M Bitcoin Exploit

The notable shift here is procedural rather than technical: a hardware wallet vendor is asking users to contribute entropy themselves, which pushes part of the trust burden back onto the person holding the device. That matters because Coldcard's appeal rests on self-custody assumptions, and a firmware review prompted by a nine-figure exploit suggests those assumptions were weaker than buyers believed. Whether other hardware makers adopt similar user-supplied randomness, or treat it as an edge case, is the open question worth tracking.