Coldcard: “The bug lived in public for 5yrs, even third party researchers didn't find it.
We believe if took the lastest LLM models to find it.”
Public record: “The flaw was pointed at, in May of 2025, by a person, with no frontier model, who traced it to the library by name and was told the company would already know if something were wrong.
It was found again after disclosure by people pointing ordinary code-analysis tools at a public repository. What took five years was not the finding. It was the looking.”
Show more
