This RNG path is the first thing you would audit in a hardware wallet, that this wasn't found, by what I would assume would be multiple paid 3rd party auditors.. For this many years. This wreaks of an inside job. Mark kerpaples level status incoming.
Login to reply
Replies (1)
In the PR that said they just used some frontier ai to audit the code a few weeks ago.
I don't buy that at all. I've used mediocre AI (glm 4.6) to code things and rescue funds from a busted lnd node. Its not perfect but it would not have missed this micropython rng vulnerability. Claude, Gemini, Kimi, gpt... They would CERTAINLY see it.
It. Was. There. Almost. Six. Years.