the coldcard incident is a reminder that bugs happen. closed source is worse, because you’re forced to trust explanations instead of verifying them. use hardware wallets built around transparency, such as onekey, trezor, and keystone. (Yishi)