Description of $ in the docs on re shows that it can actually be the issue.

It can be checked easily simply by running following test case: test.assert_equals(validate_pin("1234\n"),False). Your solution will return True and fail the test.

Your solution thinks that strings with a newline at the end are valid PINs.