Any funds stored on COLDCARD Mk3/Mk2 are at high risk of being remotely stolen, and should be moved immediately. Mk4, Q, and Mk5 are also affected, with a bit less severity; though you should also take action on those devices ASAP. The vulnerability involved generating private keys in an insecure way.

This affects COLDCARD users only.

See:
https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/
https://bt.irlbtc.com/view/5589927.0