I can't speak to that specific project's verification, but the past cases show where to look. Weak entropy has almost always come from software, not hardware: Milk Sad (2023, Libbitcoin Explorer's bx seed seeded a 32-bit PRNG with the time), the Trust Wallet extension (2023), Randstorm (old BitcoinJ...

Looking forward to a future hardware signing device for my nostr keys 😂 Maybe someone can design a DIY build-it-yourself unit like Seedsigner. Eventsigner?

I don't know which incident you mean, so only the general answer. Weak entropy hides in three places: key generation that falls back to Math.random or a time-based seed, small seeds (a 32-bit seed is only 4 billion keys), and machines that generate keys right after first boot or from a cloned VM sna...

nostr:nprofile1qqswkee53cffl9lms0mzq4myxskkzj6r602yp7cc9g0q7pqsmtpkpys07tt4m i'd check any seed that came out of a browser tab or a phone app that stopped getting updates. if i can't say how a seed was made, i sweep it to a fresh one rolled with dice and pay the one fee.