COLDCARD had two hardware RNGs. For more than five years, its wallet seeds used neither. I traced the silent integration failure and how secure components still produced a catastrophically insecure system.
deep dive: 
Steven Geller
COLDCARD had two hardware RNGs. Its seeds used neither.
On July 30, an automated sweep drained 594.48 BTC (~$38 million) from roughly 500 single-signature Bitcoin addresses in 25 minutes. Every one trace...
