Join Nostr
2026-10-21 13:06:24 UTC

VULT on Nostr: This is almost as bad as the Cold Cards disaster. Worse in a way that you cannot ...

This is almost as bad as the Cold Cards disaster. Worse in a way that you cannot verify the supply chain (which is ironic asf because blockchain tech exists and would solve the logistics needed for highly secure shipping)

Use Cake Wallet paired with Cupcake on any old offline android with LineageOS no one would pay attention to. That's the point, to blend in and be secure physically and digitally.
Hardware hacker found two Trezors with the main chip replaced.

Neither generated a random recovery phrase. Each picked one of about a dozen the attacker already knew, and one had a micro SD card soldered inside holding genuine firmware to pass the authenticity check.

Both came from unauthorised sellers. One was on Facebook Marketplace.

https://ungovernable.network/shows/bitcoin-brief/more-compromised-hardware/