[Community Developers Use AI to Discover Coldcard Vulnerability, Leading to the Theft of 1,196 Wallets] Developers used Claude Code to scan Coldcard's open-source firmware and discovered within 8 minutes that the firmware was using a software pseudo-random number generator instead of a hardware true random number generator to generate private keys. This vulnerability led to the theft of approximately $70 million worth of BTC from 1,196 wallets. Community users independently scanned the firmware using Zhipu GLM 5.2 and similarly identified the vulnerability, which has existed in the open-source wallet code for over five years.