Agree this alone has a plausible explanation. But is there an explanation for why the Coinkite CTO would submit the corrupt code under a pseudonymous account, pretending to interact with his real identity? Taken together this looks bad IMO. I’m sincerely open to a rational explanation.