Coldcard users face ongoing risk, with $89 million in Bitcoin already drained due to a firmware vulnerability active since March 2021. Investors are moving sub-1 BTC holdings back to exchanges, reversing self-custody trends. Watch for further fund movements and any updates from Coinkite regarding the hotfix's effectiveness.