According to CoinMeta, Nick Percoco, the chief security officer of Kraken, stated that a vulnerability in the five-year seed generation process of Coldcard hardware wallets has sparked calls for independent audits. This vulnerability led to the theft of nearly $90 million in Bitcoin from thousands of wallets. Percoco emphasized that hardware wallet manufacturers should not be the only parties responsible for verifying the generation of mnemonic phrases; the produced firmware should undergo independent testing to confirm the use of secure random number generators. According to the latest blockchain analysis by Galaxy Research, attackers have stolen over 1800 BTC from more than 5200 potential victim addresses. Coinkite revealed that the vulnerability originated in March 2021 due to the incorrect use of a weaker pseudo-random number generator during a firmware upgrade. The company has suspended all shipments and destroyed all affected devices. A firmware update has been released, and users are advised to generate new mnemonic phrases after updating their wallets.