SECOND COLDCARD DRAIN WAVE — GALAXY RESEARCH: 1,158 BTC / 2,673 ADDRESSES CUMULATIVE. SAME PRODUCT FAILURE, SAME OPERATIONAL VECTOR, MORE VICTIMS.

The Technologist read: same mechanism, same operational vector, more victims. The bug that made the seed generation predictable didn’t care about wallet size; the attacker’s economic filter did. First wave: high-value targets. Second wave: everything else. That pattern was always going to play out this way once the mechanism became public. Coinkite’s guidance stands unchanged — any seed made on affected firmware without dice-roll entropy or a strong BIP-39 passphrase should be treated as exposed. Migration is not optional. See the mechanism read for the technical detail; see Coinkite’s advisory for the version list. Investigation continues.