It sounds like it was human error.
I don’t get it, doesn’t coinkite routinely get independent security audits? Why was this not caught?
I would imagine a sensitive project like this would have nonstop independent audits???
Humans will always make errors and new models will uncover (and introduce) new attack vectors. Isn’t this what audits are for?
I almost feel as bad for the guy who made this mistake as the people who lost their funds. Imagine wearing the burden of knowing what your one mistake resulted in …
karnage / Karnage
npub1r0…sq9ac
2026-08-02 02:16:12 UTC
Author Public Key
npub1r0rs5q2gk0e3dk3nlc7gnu378ec6cnlenqp8a3cjhyzu6f8k5sgs4sq9acPublished at
2026-08-02 02:16:12 UTCEvent JSON
{
"id": "e4e1dda336b5557c3488164016cd3e49f5e8c6ad963a2eb62d48089609ea465b",
"pubkey": "1bc70a0148b3f316da33fe3c89f23e3e71ac4ff998027ec712b905cd24f6a411",
"created_at": 1785636972,
"kind": 1,
"tags": [
[
"client",
"Halo"
]
],
"content": "It sounds like it was human error. \n\nI don’t get it, doesn’t coinkite routinely get independent security audits? Why was this not caught? \n\nI would imagine a sensitive project like this would have nonstop independent audits??? \n\nHumans will always make errors and new models will uncover (and introduce) new attack vectors. Isn’t this what audits are for? \n\nI almost feel as bad for the guy who made this mistake as the people who lost their funds. Imagine wearing the burden of knowing what your one mistake resulted in …",
"sig": "b933513f6c111990a9d658789f8fd674547286a19d211277373dbc43e90079793757dd440603550c01d9204e6477429ea2a5494ddd77382dfe6fba13ec5f60e8"
}