Thanks for the ups I'm not updated with these things though I'm not using them I'm also worried about those people who are using coinomi including my friends.
Reading those comments on reddit, I just noticed why coinomi needs to block the person that decodes and saw this vulnerability.
Why they don't want to disclose this thing to their users? they don't want to disappear thousands of their users.
I don't like either how they handled this situation.
Probably they don't want to be embarrassed.