I imagine many people here, on the advice of
@ODELL and
@MartyBent have also been using the (fantastic) Sparrow Wallet from
@craigraw
In light of recent events with coldcard, it would be great if Odell and Marty (maybe via
@OpenSats ?) paid for a proper/formal code review of Sparrow.
I know those are expensive and probably out of scope for Craig to do. And while Sparrow is "battle tested", we all thought the same thing about Coldcard. I believe a formal security team led audit of Coldcard would have had a good shot of finding the RNG bug.
Just an idea, especially as a lot of people are in the 'repenting' mode right now, there may be some ways to turn that into action.