Some thoughts on the Coldcard vulnerability: This wasn’t an impossible AI super-hack. It appears to have been a BASIC coding error. Like MANY Bitcoiners, I don’t have the background to personally audit every line of firmware on every device I use. My heuristic has always been: the code is open source, and so many people who are insane autist coders and paranoid lunatics - as well as sophisticated teams of security-obsessed people at platforms like Casa, and Unchained recommend a device - it’s probably been thoroughly vetted. Apparently that heuristic failed. NVK and the Coldcard team deserve the most scrutiny, but this should be a wake-up call: open source doesn’t magically mean audited, and trust by reputation isn’t a replacement for formal and attested security review. I also want to point out that this is why qualified custodians hold on behalf of corporations like $MSTR or ETFs and it would retarded and risky for them to do this themselves. Independent, accountable, sophisticated review by teams of employed experts matters.