I imagine many people here, on the advice of @ODELL and @MartyBent have also been using the (fantastic) Sparrow Wallet from @craigraw In light of recent events with coldcard, it would be great if Odell and Marty (maybe via @OpenSats ?) paid for a proper/formal code review of Sparrow. I know those are expensive and probably out of scope for Craig to do. And while Sparrow is "battle tested", we all thought the same thing about Coldcard. I believe a formal security team led audit of Coldcard would have had a good shot of finding the RNG bug. Just an idea, especially as a lot of people are in the 'repenting' mode right now, there may be some ways to turn that into action.

Replies (23)

For that same reason I have put a bounty amount on my sparrow hot wallet. If something goes at least I will be able to inform with proof.
He founded AnchorWatch (UTXO based insurance company) and is sometime known as the Giggler. I've met him several times and even broke bread with him. He's a wizard with Bitcoin transactions and a joyful man to be around. He's leading a Bitcoin red team using Kimi and other high end models to scan/review load bearing Bitcoin repos for vulns and working to disseminate and patch them.
Calle is just another NVK to me, so it kinda brings down the reputation of that group. Still, maybe something good will come of it.
I think every company that have something to do with Bitcoin funds must chip in collectively for the ultra best AI models run 24/7 eying on the most well known Bitcoin projects and Bitcoin itself. Why should this be a burden only to @OpenSats. Let @Michael Saylor⚡️,#blackRock, @strike, #Tether etc. chip in to harden not just their own products but all collectively. Bitcoin is for enemies.