EDIT: this is a genuine question, I thought it had been unmaintained for ages and vulnerabilities had been found. My memory betrays me?
However, at the time it was theorized that in the event the maintainers had found a fundamental flaw, disclosing that flaw by issuing a patch would immediately jeopardize all preexisting truecrypt containers by revealing a method for breaking them. That would be untenable, and so the only alternative would be to shut down the entire project and recommend no further use of the software - as was done.
A subsequent audit did not identify any such security flaw, so the prevailing theory is now that the maintainers were forced to stop work by a governmental agency. It's considered safe and now known as veracrypt.
However, the question I have is whether a single crowdsourced security audit would be capable of finding a flaw that it took the developers themselves years (decades?) to identify.
> Using TrueCrypt is not secure as it may contain unfixed security issues.
Not Secure As. Whether this holds any weight, only the maintainers would know.
More info: https://grahamcluley.com/truecrypt-hidden-message/
https://en.wikipedia.org/wiki/Paul_Le_Roux
> In 2019, Evan Ratliff—who wrote a series of articles about Le Roux for The Atavist Magazine—published The Mastermind, a 446-page account of Le Roux's ventures.
https://www.penguinrandomhouse.com/books/549566/the-mastermi...
Has this been substantiated?
audit: http://istruecryptauditedyet.com/
final audit summary: https://blog.cryptographyengineering.com/2015/04/02/truecryp...
Or do you have a competing tool? Let me guess. Someone will ask for an alternative and another will suggest..
This doesn't mean it has a "fundamental flaw that means everything it encrypted is trivial to unlock today."
There has been no evidence to suggest that is true. An NCC Group audit found no significant flaws: https://opencryptoaudit.org/reports/TrueCrypt_Phase_II_NCC_O...
If you are unsure of a fact, you can always do some quick research using your web browser before posting incorrect information in a way that may be misunderstood.