Nobody found it cause nobody was incentivised to do so. This post captures it well from a researcher’s perspective:
https://x.com/whitehatmage/status/2083230636870164750?s=46But yeah, seems paranoid mode becomes the “by default” mode.
I feel bad for the people who had their BTC stolen. And as a Coinkite customer (who luckily was paranoid) and security researcher I’m disappointed in Coinkite.