Apesace @apesace

@Route2FI Multisig 2 of 3 using hardware wallets (each from different vendor)

A few words given the recent exploits on hardware signing devices: • The Ledger supply chain attack represents one of the most sophisticated attacks thus far on the wallet ecosystem. In many ways it’s a lot more sophisticated than the Coldcard RNG exploit, because that one was software only. This one took a cross-border company buyout, tampering with the devices (implanting an eSIM, an LTE module and a CPU) and manufacturing the implants at scale. • These sorts of attacks have been predicted by early Bitcoiners, but in Bitcoin they remained theoretical or crude until this year. It shows that the level of sophistication of attacks has risen quickly, and what was previously “good enough” advice on wallets and self-custody is no longer sufficient. • When we started Nunchuk a few years ago, our premise was that multisig, and multi-vendor multisig, needs to become the standard for self-custody in the future. But even we didn’t expect how fast it would materialize. This is likely due to 2 factors: Bitcoin getting more mainstream, and the rise of AI-assisted attacks. This is a Sputnik moment for Bitcoin self-custody. The defenses need to level up. • Passphrases wouldn’t have helped in the Ledger case, since you are required to enter the passphrase into the device for it to sign any transactions. A compromised device that phones home the seed phrase can also easily phone home the passphrase the moment you enter it. • Similarly, generating the private key somewhere else (even by rolling dice) and subsequently importing it onto a tampered device wouldn’t save you here. The device can phone home the seed phrase the moment it’s imported. • Anti-tampering techniques might help, such as transparent casing or bricking the device if it’s tampered with. Or forever displaying a message once the seal is broken. Or using on-device encryption between the internal hardware components. But a dedicated and resourceful enough attacker can still find ways to get around these layers. Tampering and anti-tampering have long been a cat-and-mouse game. In 2008, card readers doctored right off a Chinese production line sent card data and PINs over mobile networks to Pakistan. The Ledger attack is the same playbook, 18 years later. The bigger the target, the more attackers spend on overcoming the defenses. • You should order directly from the vendors as much as possible, using a PO box for privacy. • Any setup that relies on a single hardware/software stack or a single vendor should be considered at risk. • Building your own hardware signers from generic parts is a good option for technical users. • Multi-vendor multisig should become the standard. Each signer should have a completely independent hardware/software stack from the other signers. The point is that there shouldn’t be any single-point-of-failure anywhere in your setup. • Many advanced protocols rely on timelocks and the recovery path being a simple singlesig. The recent attacks and exploits should highlight how dangerous this could be. Timelocks simply delay a risk. If a seed is compromised and there’s a timelock involved, the attacker just needs to wait out the timelock. (For Miniscript wallets, there’s the wallet descriptor too, but presumably it also gets sent to the device at some point.) Vault-like protocols face a similar problem: any withdrawal or recovery path that relies on a single key is a potential single point of failure. • For our on-chain timelock-assisted wallets, in a few weeks we are adding the option to customize the recovery path to be an M-of-N, so that, if you want, spending would require multiple keys at all points during the wallet’s lifetime.

Mark Karpelès @MagicalTux

a week ago

@moo9000 Left to right: e-SIM, CPU with firmware able to recognize Ledger's font as shown on screen and capture words as they appear on screen, and a LTE module that can connect once the seed has been fully captured.

50 144 1K 1.2M 583

Soon...

This is a huge inflection point for BTC after one of the largest short liquidation events in recent history I've spent the last 4 hours studying ETF flows, Microstrategy credit facilities, cross-exchange liquidity and funding rates, as well as prime OTC desk inventory They all point to the same inevitable conclusion: If it keeps going up, then the market is bullish If it stops going up and goes down, then the market is bearish

@saylor @Strategy Dumping on the plebs again?

If you waited until MSTR was trading over the 200 SMA you would have captured over 500% on BTC this cycle. if you waited until it was trading under the 200 SMA you avoided 95% of Bitcoin's drawdown. MSTR is the signal that the market is willing to pay a premium for BTC. there is no rush to be long.

@playponzimon Rare

@TheCryptoKazi No bounce for ya man

Gm

XD

Ponzimon @playponzimon

a year ago

WHO'S READY TO POP SOME PACKS?

11 4 71 6K 1

@coinmamba Vitalik autism was bullish when ETH was doing good, somehow this turned bearish recently ;)

@finallyx Hats stays on?

@RunnerXBT 0

I love this new spot BTC trading on Hyperliquid. Buy BTC with your USDC on Arbitrum and send it straight to a Bitcoin wallet. Removes the centralized exchanges all together if you want to move across chains. A feature that actually changes things for me.

@solidintel_x @elonmusk With Putin as the the other guy?

@TraderMercury Because everyone wants to become rich real quick, from 0 to hero within a few days, that’s why

@PiroschTheCat @elonmusk Never go full retard

You think trumps ego will allow BTC to trade below 100k while hes in office?

@cryptojaruna @cryptonyme_ @HighStakesCap Focus more on concentrated bets

@saylor Saylor about to become Mansa Musa of our time