Galaxy Research Warns of Ongoing Coldcard Attacks

The notable part is the source: a research desk, not a vendor, flagging that the threat is still active rather than resolved. That shifts the issue from a one-off exploit to a sustained campaign against a specific hardware wallet line, which matters for the broader self-custody narrative that assumes cold storage is the safe endpoint. The open question is whether device-level verification becomes a routine practice or stays an after-the-fact response.