The Coldcard firmware flaw reduced the effective entropy of affected Bitcoin wallet recovery seeds from approximately 128 bits to 40 bits.

From the articleTrezor expands wallet passphrase limit to 128 characters after Coldcard attacks
Opening sign-in…