Attackers reconstructed weak Coldcard recovery phrases to access wallets, but users with strong, unique passphrases were protected from the Coldcard attacks

From the articleTrezor Raises Wallet Passphrase Limit to 128 CharactersAlso in Trezor Now Accepts 128-Character Passphrases, Pointing to Coldcard's Seed Flaw - Unchained