The five-year bug escaped detection because auditors verified that the intended random number generator existed, but not that it was being called.
Coldcard’s 5-year flaw reveals hardware wallet testing gap: Kraken’s security chief
The five-year bug escaped detection because auditors verified that the intended random number generator existed, but not that it was being called.