The public record now supports the finding that #Coinkite defrauded their customers.
1. The CTO authored and GPG-signed the vulnerable libngu code under the deliberately constructed switck alias, operated it publicly on GitHub and X, engaged in self-conversations between the identities, and had the company thank the alias as an independent contributor.
2. The CEO privately described a critical flaw matching that exact remote-theft vulnerability at the time the affected firmware was distributed to customers.
3. The company continued selling and marketing Coldcards as highly secure while the issue remained undisclosed for five years, during which customers generated weak seeds and later lost substantial funds.
These facts establish material misrepresentation, knowledge of falsity, intent to induce reliance through the false appearance of independent secure development, and resulting damage.
