If you understand this article you’ll never buy a coldcard again. It reads like they had people that were just blindly trying to make the code compile, maybe under pressure to rush a product out. It is incomprehensible.


When random.bytes() runs but doesn't work
What a commit message tells us about the recent COLDCARD bug