Replies (1)

If you read the removal request letter it was pure incompetence. They left the secure element TRNG value in the code as 0 and the coldcard used a weaker fallback RNG to generate the seed.