"...the combativeness had a function. It made criticizing Coldcard expensive, and the clearest examples are the ones where the target was not a competitor but the machinery of verification itself.
In June 2023, WalletScrutiny, a project whose entire purpose is to check whether a wallet's public code actually matches the binary that ships, reported that it could not reproduce certain Coldcard builds.
Speaking about it a year and a half later, on Citadel Dispatch episode 8, NVK owned it without reservation: “it was 100% our fault”. And in the same breath, he characterized the people who had reported it: “it was like PR terrorism”.
Elsewhere he called the disclosing researchers “salty cunts” and explained his refusal to pay them a bounty with “I don't deal with terrorists”."