The Coldcard theft incident has more follow-ups, and this time it's even more awkward. A security team scanned Git open-source repositories and found 85 critical vulnerabilities across 390 projects. I've always felt that the biggest problem with hardware wallets isn't that they're insecure, but that they give people an illusion of absolute security. Everyone always says 'not your keys, not your coins,' but rarely does anyone mention the second part: your keys might also be generated by someone else. A long time ago, Jeni-kun had a thought: with AI being so powerful now, if it were used to scan past DeFi projects for vulnerabilities, wouldn't it hit the jackpot every time? I dare say that 60% or more of current Web3.0 projects have vulnerabilities—it's just a matter of who discovers them first. Follow me for daily tips on getting rich or going to jail!