So I just found out the coldcard is closed source. Guess nobody can see if this was intentional then. Don't rule it out. Wouldn't be the first in this 'community' to be working for the feds
https://me...
It is open source in the sense that the source code is available for review. It's on the MIT License that they migrated to, to prevent other companies legally reusing their code in commercial competitors. This change, which involved rewriting all of their GPL code introduced the vulnerability that was exploited
1