In light of recent events with coldcard, it would be great if Odell and Marty (maybe via OpenSats (nprofile…5h0z) ?) paid for a proper/formal code review of Sparrow.
I know those are expensive and probably out of scope for Craig to do. And while Sparrow is "battle tested", we all thought the same thing about Coldcard. I believe a formal security team led audit of Coldcard would have had a good shot of finding the RNG bug.
Just an idea, especially as a lot of people are in the 'repenting' mode right now, there may be some ways to turn that into action.
