I wonder if Ben ever mentioned that c0ldcard also used outdated chip ATECC608A in one of their mk3 devices that is surprisingly still in production?
It's worth checking out, but while doing so, we must keep in mind several important dates. Those are the release dates of the Coldcard Mk3 and the Foundation Passport Batch 2 as well as the time the vulnerability of the 608A chip was discovered. I am not sure on the timeline for the latter. Regarding the release dates of the hardware devices, the Coldcard is older. Mk3 was already out in Q4 2019/Q1 2020 I think. Passport's Batch 2 started shipping in Q1 2022. If Ben's review of the Mk3 was before the discovery of the vulnerability, it's clear that he couldn't have mentioned that in his video but he could have said something elsewhere. The vulnerability was probably already pubic information when his Batch 2 video came out.