Coinkite Coldcard Bug Exposes Single-Sig Risk; Multisig New Baseline

This incident shifts the default standard for self-custody hardware wallets. The core issue isn't a single product flaw but the structural fragility of single-vendor, single-signature setups, where one compromised device or supply chain point equals total loss. The vendor's response—mandating physical entropy sources—addresses seed generation but not the broader architectural risk. What matters now is whether the market recalibrates around multi-vendor multisig as the baseline, moving trust from any one company's integrity to a distributed model where no single failure is catastrophic. The open question is how quickly other hardware makers follow suit in design and guidance.