Thanks for the advice. My friend had to travel to collect the keys and move coins, so he was trying to assess the urgency and the risk until he was able to move the coins. Anyways now they are moved and safe.
I’m assuming we are not trusting open dimes and tapsigners anymore either? What about the physical dice and microsd cards sold by coinkite, can they be trusted? Don’t mean to sound tin foil hat, but after what happened I don’t know if it’s possible to be too cautious.
