The Coldcard holders drained on 30 July had multiple safes, a safety deposit box and a device that never touched the internet, which is four defences against the same threat and none against the one that emptied them, a shape engineers call common cause failure
When every precaution points the same direction, they all fail together.