[Opinion: Coldcard Vulnerability Exposes the Limitations of Bitcoin's 'Don't Trust, Verify' Principle] According to The Block, Bitcoin security researcher and Casa co-founder Jameson Lopp stated that the Coldcard vulnerability incident highlights the limitations of Bitcoin's 'Don't Trust, Verify' principle. Lopp pointed out that verifying complex software and hardware is unrealistic for 99.9% of users, who ultimately have to trust hardware manufacturers, software developers, and security researchers. However, he believes this does not mean that self-custody has completely failed but rather indicates that users should not rely on a single piece of hardware or software. Lopp also noted that AI is changing the security landscape, as AI-assisted code reviews can identify potential vulnerabilities faster than even experienced security researchers, potentially allowing attackers to exploit open-source code before defenders can detect it. CoinKite's CEO has acknowledged the firmware vulnerability and referred to it as a 'realistic warning of the new AI paradigm.'