Whoa, this thread finally breaks down the vulnerability analysis of Coldcard. Turns out Coinkite CTO Peter Gray (@DocHex) used the pseudonym @switck to write the libngu library containing the vulnerability. - October 2020: Library created - January 2021: Critical error code added - March 2021: Officially integrated into the firmware - July 30, 2026: Exploited on a large scale, over $1 billion in BTC stolen