Rodolfo (NVK (nprofile…vk44) ) built #ColdCard from the open source code of Trezor.
The Foundation forked the ColdCard code to create the Passport hardware wallet. (This is perfectly legal and common practice in the open source space.)
Rodolfo took the plunge and changed the license of ColdCard so that competitors could no longer use his code.
But since he couldn’t change the GPL license he had obtained from #Trezor, he had to remove that code and write new code in its place.
In the process of rewriting it, he introduced the RNG bug into the code.
(It was around this time that I started listening to Citadel Dispatch Podcast ODELL (nprofile…vpu2) and MartyBent (nprofile…7r4w) , and Matt Odell and Matt were also fairly good at getting away with NVK's embarrassment and spent a significant amount of time nagging NVK about it every time he was invited on his show. But NVK had no logical reason and continued with his childish excuses. He was really just fed up that another company had taken and used his code without permission!)
This problem had been in the code for 5 years and no one noticed, because when others can't use a code in their own commercial products, there's no economic justification for spending time reviewing and evaluating that code.
This greed led to Rudolph's downfall.
(Taken from this tweet (https://x.com/gegelsmr4/status/2083716607977967622) with added bread)
