Background and Context
In a detailed examination of past statements and decisions made by Coinkite, experts highlight repeated dismissals from leadership about the possibility of a so-called "retirement attack." This type of risk involves manipulating randomness in the generation of wallet seed keys, potentially opening the door to future thefts.
Key Details of the Allegations
In December 2020, CEO Rodolfo Novak (known as NVK) openly mocked concerns over retirement attacks, suggesting users simply rely on dice rolls for randomness.
A worrying change in the code was committed just ten weeks later by Coinkite’s CTO, Peter Gray, who allegedly used a pseudonymous GitHub account to introduce a flawed pseudorandom number generator.
Despite warnings by developers and users in the following years, the security risk remained unresolved.
