We ran a scan with an automated tool (zkao) to find bugs in coldcard, it found the randomness bug.
The scan is available here: https://zkao.io/public/scans/_0bfBxlhtfEAR2uXl9jXk
I also included the complete scan result here as a markdown file.
Here is claude's analysis on it finding the randomness bug via a websearch, but also not using a websearch. This is a best case scenario as we want to be effective at finding bugs WITHOUT cheating, but also we want to be effective at doing websearches to find bugs.