Someone did an analysis of hardware wallet's software using kimi k3

???? Yellow ≠ broken. None of the nine Yellow products has a confirmed fund-loss-by-default flaw.

Yellow means at least one of:

(a) something security-critical sits outside independent verification. i.e., closed firmware or secure-element code (Opendime, Ledger, open source please!), vendor-run recovery infrastructure (Phoenix/ACINQ, Jade's oracle, Bitkey's WSM);

(b) a real but bounded weakness, such as a zero-work-factor KDF (BlueWallet), weak legacy KDFs on a hot wallet (Electrum), no-SE DIY hardware with thin maintenance (SpecterDIY), a just-patched vulnerability awaiting its report (Bitkey); or

(c) a dead/unmaintained product whose crypto reviewed clean (free Samourai!).

In every case the entropy/key-generation path itself was reviewed and found sound unless the cell says otherwise.

Original tweet link:

https://x.com/i/status/2083612094713180249

Credit goes to x.com/bitcoinsbanker