This clip strongly suggests that NVK was aware of the exploit that his CTO shipped in 4.0.0. 🚨🚨🚨 1. According to Odell, NVK won't share the details of the vulnerability because it would allow him to steal all their users Bitcoin. 2. He also indicates to Odell that his self custody guides which use dice rolls are safe from the 4.0.0 vulnerability. 3. A patch fix is shipped, 4.0.1, which disables a USB debugger flag, a setting that would regularly be used in development, because it would allow an attacker with physical access to a coldcard to extract it's secrets. 4. None of the things NVK told Odell can be made to apply to the USB debugger oversight fixed in 4.0.1, but guess what they do apply to? The vulnerability Coinkite CTO authored and shipped in 4.0.0, which would allow remote theft if Bitcoin only if dice was not used to replace the false/pseudo entropy of Gray's exploit. NVK would have to explain how he told Odell details that perfectly describe Gray's exploit while also claiming not to know that it had gone out to customers.