If NVK knew of the vulnerability how would coldkite go about fixing it without exposing to the public the flaw. It’s possible their hope was over time people would migrate their funds to new wallets lowering the attack surface. Seems like they were stuck if they knew and the best option was to hope it went unnoticed. Either way a total failure of the company.