Track the security status here: https://coldcard.com/security/status

Explore the interactive tool and source code here: https://scgbckbone.github.io/seedflow/

Yet, there's still no public address by their CTO on what happened. Please beware.