NVK recently published an essay on security architecture of HWWs where he explained security flaws of competitor HWWs and how to design against these flaws. You can see this on his nostr page. The first thing it taught me was how to compromise a seedsigner.
This shows he has the competence and mindset to develop a hidden exploit in cc. $130M in stolen btc is the motive.
With everything else you're pointing out about Peter Gray, this looks straight up like an inside job by those two folks.
They are either criminally negligent incompetents, or thieves.
