Coinkite, the manufacturer of the Coldcard hardware wallet, said it has sent security advisory emails to all reachable user addresses through its store and email subscription system, with the messages sent in batches starting last Friday. According to Foresight News, Coinkite said users who receive the email can confirm it came from the company’s official channels.
The company also advised users to rely on the latest timestamped notice posted on its official blog and not trust screenshots, forwarded messages, summaries, or information from unknown sources. It said firmware should only be downloaded from coldcard.com/downloads, and that it will never ask for a user’s PIN, seed phrase, or BIP-39 passphrase, nor request a signature for an unverified PSBT transaction.