The Thorchain security team closed the signing library's source code to conduct a deeper security review