On August 2, 2026, X account BTC Sessions reported the first confirmed loss from the July 2026 Coldcard seed flaw thefts involving a device using a weak two-word passphrase

From the articleTrezor Now Accepts 128-Character Passphrases, Pointing to Coldcard's Seed Flaw - Unchained