headings. Translate accurately.
Meta description: "A seed generation flaw in Coldcard Mk3 hardware wallets uses weak button-press randomness, allowing attackers to recreate keys. Coinkite urges users to migrate funds immediately." -> Danish: "En fejl i seed-generering i Coldcard Mk3-hardwarepunge bruger svag tilfældighed fra knaptryk, hvilket giver angribere mulighed for at genskabe nøgler. Coinkite opfordrer brugere til straks at flytte midler."
Let's translate the content paragraph by paragraph.
Original: "
A flaw in the seed generation process of Coldcard Mk3 hardware wallets allows attackers to recreate private keys due to weak randomness sourced from button presses. Bitcoin Core contributor instagibbs reproduced the vulnerable seed on a newly initialized Mk3, confirming the risk. The vulnerability undermines the air gap that hardware wallets are supposed to guarantee — if an attacker can predict the seed, they can derive addresses and monitor for deposits without ever touching the device.
"
Translation: "En fejl i seed-genereringsprocessen i Coldcard Mk3-hardwarepunge giver angribere mulighed for at genskabe private nøgler på grund af svag tilfældighed fra knaptryk. Bitcoin Core-bidragyderen instagibbs reproducerede det sårbare seed på en nyinitialiseret Mk3 og bekræftede dermed risikoen. Sårbarheden underminerer luftgabet, som hardwarepunge formodes at garantere – hvis en angriber kan forudsige seedet, kan de udlede adresser og overvåge indbetalinger uden nogensinde at røre enheden.
"
Note: "air gap" is "luftgab" in Danish. "button presses" -> "knaptryk". "reproduced" -> "reproducerede". "newly initialized" -> "nyinitialiseret". "undermines" -> "underminerer". "guarantee" -> "garantere". "derive addresses" -> "udlede adresser". "monitor for deposits" -> "overvåge indbetalinger".
Next: How the flaw works
-> Sådan fungerer fejlen
Paragraph: "The Mk3 generates entropy by measuring the timing of user button presses during initialization. That randomness turned out to be far too predictable. The issue affects Mk3 devices running firmware 4.0.1 or later, as well as Mk4 and Mk5 units before firmware 5.6.0, and Q devices before version 1.5.0Q. Coinkite, the company behind Coldcard, published an advisory this week detailing the problem and urging users to migrate."
Translation: "Mk3 genererer entropi ved at måle timingen af brugerens knaptryk under initialisering. Den tilfældighed viste sig at være alt for forudsigelig. Problemet påvirker Mk3-enheder med firmware 4.0.1 eller nyere, samt Mk4- og Mk5-enheder før firmware 5.6.0, og Q-enheder før version 1.5.0Q. Coinkite, virksomheden bag Coldcard, offentliggjorde denne uge en advisory, der beskriver problemet og opfordrer brugere til at migrere."
Note: "entropy" -> "entropi" (used in Danish). "timing" -> "timing" or "tidsmåling"? Better "timingen" but we can say "måling af timingen". "firmware" stays. "advisory" -> "advisory" or "rådgivning"? In tech context, often "advisory" is used, but we can say "en advisering" or "en meddelelse". Better: "offentliggjorde en advisory" is fine, but to be natural: "udsendte en sikkerhedsmeddelelse" but "advisory" is common. I'll use "en advisory" as it's understood.
Next: Who is affected
-> Hvem er berørt
Paragraph: "The highest-risk profile is a Mk3-generated seed used in a single-signature setup with no BIP-39 passphrase, no dice entropy, and no multisig. A strong passphrase adds an independent barrier, but Coinkite still recommends migration. Multisig setups confine the risk to one signer — if the other keys are independent, the overall wallet remains safe. User-supplied dice entropy can mitigate the flaw, but only if at least 50 fair rolls were used; fewer rolls or any uncertainty still requires a full migration."
Translation: "Den højeste risikoprofil er et Mk3-genereret seed brugt i en single-signature-opsætning uden BIP-39-passphrase, uden terning-entropi og uden multisig. En stærk passphrase tilføjer en uafhængig barriere, men Coinkite anbefaler stadig migration. Multisig-opsætninger begrænser risikoen til én underskriver – hvis de andre nøgler er uafhængige, forbliver den samlede pung sikker. Brugerleveret terning-entropi kan afbøde fejlen, men kun hvis mindst 50 ærlige kast blev brugt; færre kast eller enhver usikkerhed kræver stadig en fuld migration."
Note: "single-signature" -> "single-signature" (often used) or "enkeltunderskrift". I'll keep "single-signature" as it's common. "BIP-39 passphrase" -> "BIP-39-passphrase" (keep). "dice entropy" -> "terning-entropi". "multisig" stays. "confine" -> "begrænser". "signer" -> "underskriver". "mitigate" -> "afbøde". "fair rolls" -> "ærlige kast" (or "retfærdige kast" but "ærlige" is fine). "uncertainty" -> "usikkerhed".
Next: What users need to do
-> Hvad brugerne skal gøre
Paragraph: "There is no firmware fix that can change existing keys. The only remedy is to generate a new seed on an unaffected device and transfer all funds. Coinkite recommends verifying the backup, fingerprint, and receive address, then sending a test payment before moving the full balance. The advisory covers Mk3 devices manufactured from March 2021 onward, with the final Mk3 firmware released in June 2023 — meaning there is a roughly three-year window during which dormant holders may still be using vulnerable seeds."
Translation: "Der er ingen firmware-fix, der kan ændre eksisterende nøgler. Den eneste løsning er at generere et nyt seed på en upåvirket enhed og overføre alle midler. Coinkite anbefaler at verificere backup, fingeraftryk og modtageradresse, og derefter sende en testbetaling, før hele saldoen flyttes. Adviseren dækker Mk3-enheder fremstillet fra marts 2021 og fremefter, med den endelige Mk3-firmware udgivet i juni 2023 – hvilket betyder, at der er et cirka tre år langt vindue,
