Coldcard: Existing Mnemonic Cannot Be Fixed via Update, Users Must Migrate

The insistence that affected seeds cannot be patched via firmware is the crux: it shifts the burden from vendor remediation to user migration, a materially different risk event than a fixable bug. For hardware wallet holders, the practical exposure is operational—every affected user must generate fresh seeds and move funds, a window during which self-custody discipline matters most. The open question is whether the migration guidance proves sufficient across the affected base, and how the vendor's disclosure shapes trust in hardware-wallet security assumptions more broadly.