> from a major app, at some point in the future where it turns out that all seed generation was not in fact random. Honestly, it's probably already happened mu

> from a major app, at some point in the future where it turns out that all seed generation was not in fact random. Honestly, it's probably already happened multiple times and they just haven't gotten caught Bitpay's "copay" wallet used only 64-bits of randomness for the nonces in their signatures, making it trivial to recover the user's private keys. That wallet was "open source" -- but it doesn't much matter if its open source if no one competent is reading or reviewing the code. They never announced the vulnerability-- they fixed it and the person who introduced it quietly parted ways with the company (he surfaced again later as part of conman Wright's team, ... I'm not sure if that increases my estimate the the vulnerability was intentional or if it was just incompetence).