Whirlpool is a ZeroLink implementation similar to Wasabi Wallet 1.x was and even when the protocol and the cryptography involved are simple, there are many chances to make mistakes. During the early days Wasabi team introduced bugs using RSA and then using Schnorr, for example.
This is something to celebrate anyway as we need more privacy tools and because it was sad to witness the level of cowardy raining in the environment while a bunch of "purists" attacked all privacy tools as if they were able to do it better.