Five years and five months before $100M+ in Bitcoin was stolen from Coldcard customers, Coinkite founder and CTO Peter D. Gray authored the vulnerability under an alias, then merged it into the Coldcard codebase as CTO.