I don’t change the headline generally, but I also didn’t catch that it wasn’t “the real” matrix.

Probably an implementation issue. Make a small error there, like storing parts of a key in memory or something like that and you’ve compromised security.