According to CoinMeta, a $116 million vulnerability in Coldcard sparked controversy regarding security audits. The CEO of Coinkite, NVK, defended its security audit process, stating that the new AI model identified defects that human auditors had missed. In a post on November 9th, he mentioned that the audit process included Coldcard hardware, firmware, random number generation tools, and release controls. He cited two paid third-party product audits, covering MK4 in 2022 and Q in 2024. At least 15 external audits or security studies involved Coldcard hardware, firmware, random number generation tools, or release controls. At least two paid third-party product audits were completed before the vulnerability was discovered. The developer of Bitcoin, Luke Dashjr, challenged NVK's claims, arguing that human auditors are capable of identifying issues, and publicly disclosed findings he had previously shared with Coinkite. Dashjr pointed out that the claim that only complex models can identify problems with random number generators is incorrect.