how did the fucking ledger lab guys not find this. always thought they especially tried to break cold cards
The main fault lies with coldcard. The whole set of hardware wallet companies also need to figure out how prevent this or the self custody market looks at dice and open source calculations instead of $200 foot guns.
1