AGIUSDT
SingularityNET / Tether USD
crypto Composite

What would it do to the viability of the HW wallet business if such a vulnerability is grounds for legally-enforced reimbursement?
I mean I understand completely, I'm not going to defend NVK and co. I think the rules and precedent would need to be crystal clear though if any action is taken.
Like, I don't think Trezor should be held responsible for lost funds if quantum computers break SHA-256 and a bunch of users fail to move over to whatever quantum safe solution we cook up. I don't think Ledger should be responsible if a bunch of users are targeted and tricked into entering their seed phrases online.
Or even if people spend years combing through code without finding anything, but then Kimi K12 super mega AGI finds and exploits a horrible vulnerability after being available for a day, it's not like due diligence wasn't taken up until the release of what essentially amounts to a super weapon.
Even if any ruling is very specific in it's application to Coinkite's situation (NVK ignoring concerns, implementing bad code knowingly to begin with, etc.) it's still going to be a massive regulatory and insurance headache for every other company doing things right.

What would it do to the viability of the HW wallet business if such a vulnerability is grounds for legally-enforced reimbursement?
I mean I understand completely, I'm not going to defend NVK and co. I think the rules and precedent would need to be crystal clear though if any action is taken.
Like, I don't think Trezor should be held responsible for lost funds if quantum computers break SHA-256 and a bunch of users fail to move over to whatever quantum safe solution we cook up. I don't think Ledger should be responsible if a bunch of users are targeted and tricked into entering their seed phrases online.
Or even if people spend years combing through code without finding anything, but then Kimi K12 super mega AGI finds and exploits a horrible vulnerability after being available for a day, it's not like due diligence wasn't taken up until the release of what essentially amounts to a super weapon.
Even if any ruling is very specific in it's application to Coinkite's situation (NVK ignoring concerns, implementing bad code knowingly to begin with, etc.) it's still going to be a massive regulatory and insurance headache for every other company doing things right.