Amidst estimates that the damage from the security vulnerability in Coinkite's Coldcard hardware wallet exceeds 1800 BTC, it has been alleged that Peter Gray, co-founder and CTO of Coinkite, is the author of the LibNgU code identified as the root cause of the problem. According to Bitcoin News, the LibNgU code was reportedly written by an anonymous developer account 'switck'. However, the discovery that Gray's GPG key signed dozens of code commits for the switck account raises the possibility that the two individuals are the same person. Bitcoin developer James O'Beirne claimed that in May of last year, he advised Coinkite to remove the LibNgU code, citing suspicions about its random number generator (RNG) implementation. However, the company reportedly responded at the time that if there had been a problem, it would have already been discovered. If these claims are true, it means that the person who wrote the code associated with the incident where over 1800 BTC was stolen received a direct warning about potential issues with the random number generation method more than a year before the vulnerability was disclosed, but failed to address it.
