News linked to both this project and an event.
Odaily reports: SlowMist has issued a warning that a fake "Ledger firmware update" campaign is exploiting the recent Ledger supply chain incident to conduct attacks. The phishing page is highly convincing, including a fake "Genuine check" page, a device selection interface, and an "Update Now" button. SlowMist reminds users never to update Ledger devices through website links and never to enter their Recovery Phrase anywhere.
: Bitcoin News posted on X platform, stating that Bitcoin Core developer instagibbs claimed to have successfully reproduced the reported COLDCARD vulnerability on a newly initialized COLDCARD MK3 device, using only the number of button presses during the setup process, and said, "Sorry, now is the time to panic." He believes the issue affects MK2/MK3 devices, but stated that it is currently unable to confirm whether the MK4 has the vulnerability. Developer Antoine Poinsot stated that the key difference is that the MK4 uses a hardware random number generator to provide entropy for the seed and actually utilizes the microcontroller's True Random Number Generator (TRNG), while the MK3 does not. The proof of concept and mnemonic phrase verification are still under review.