@prismicide can you elaborate on how its not actually secure?
When the first release was out, a friend of mine (prismicide co-founder) took a few hours and managed to extract the seed with a basic buffer overflow. At that time, there were no security. At all. We reported the problem and they fixed it.
After that, we met the founders in the Pragua launch party. They are friendly, the project is still nice... we don't want to blame them... they managed to create a nice small product from nearly nothing and nowhere but they simply don't understand much about secure architectures... We tried to convince them to use secure elements for a start (like we do in our own HW1 hardware wallet in www.hardwarewallet.com and like we'll do too in the next Bitcoin Pinpad project), but no luck for now.
Since then, we saw other security flaws... perhaps we'll found the time to make other reports, but we are focusing on other things right now. This project is nice but not very serious regarding security and I feel nearly no one except us challenged their architecture. (there should have been other reports, done by other people...) They should really ask other security experts to help them to audit and improve their security. It's better than nothing.
