The Coldcard theft incident has more follow-ups, and this time it's even more awkward. A security team scanned over 390 open-source BTC repositories and uncovered 85 critical vulnerabilities. I've always felt that the biggest issue with hardware wallets isn't that they're insecure, but that they give people the illusion of absolute security. Everyone loves to say 'not your keys, not your coins,' but rarely does anyone mention the second part: your keys might also be generated by someone else. A long time ago, Jeni already had this thought—now that AI is so powerful, if it were used to scan past DeFi projects for vulnerabilities, wouldn't it hit the mark every time? I dare say that 60% of current Web3.0 projects have vulnerabilities; it's just a matter of who discovers them first. Follow me for daily tips on getting rich or going to jail!