Coldcard’s 5-year flaw reveals hardware wallet testing gap: Kraken’s security chief

The five-year bug escaped detection because auditors verified that the intended random number generator existed, but not that it was being called.