This article is bad because its adspam bullshit, and doesnt explain the vulnerability...

.. but this stupidest thing coinkite did was their dogshit design: Trying to inject their RNG logic into lower levels and hoping 3rd party libraries (through micropython) used them correctly... rather than just using their hardware dependencies directly. That design, and all bugs that came out of it, seems massively and avoidably stupid