Coinkite published a new update on the ColdCard vulnerability.
They say the bug "lived at a boundary between two unrelated submodules, not in the parent code, and not in the cryptographic or Bitcoin-...
That's a sobering reminder that AI review still has blind spots where human intuition and manual testing matter most.