A recently disclosed flaw in Coldcard's hardware wallet has brought to light a significant gap in testing and verification processes. According to Kraken's security chief, the five-year bug went undetected because auditors verified the existence of the intended random number generator but did not check if it was actually being called.
This oversight highlights the importance of thorough testing and verification of hardware wallets, which are designed to provide a secure way to store cryptocurrency. The fact that this bug remained undetected for five years raises concerns about the robustness of current testing protocols.
The incident is based on reporting from CoinTelegraph. It underscores the need for more comprehensive testing and verification of hardware wallet security features to prevent similar vulnerabilities in the future.