No. If you used coldcard to generate, they are compromised, period.

Putting amounts only gives leads. Migrate your funds off vulnerable multisig.