I just want to express that Hundreds of billions of dollars are managed through Ledger and Trezor hardware wallets. It's a huge temptation.


 I cannot find a particularly secure way to store Ethereum tokens. This disappoints me. If I have to trust a single company to store Ethereum tokens, I don't consider it truly decentralized. These experiences have solidified my belief in investing only in Bitcoin in the future.


Thanks. I have many hardware wallets, like ledger and trezor.


There may be some misunderstanding, so I have re-edited the message description.Thank you.


There may be some misunderstanding, so I have re-edited the message description.Thank you.


There may be some misunderstanding, so I have re-edited the message description.Thank you.


There may be some misunderstanding, so I have re-edited the message description.Thank you.

\
Thanks, USDC and DAI are better.


On my opinion, mainstream hardware wallets, like ledger, trezor, bitbox, keepkey, are better choices.

I am sorry that I do not have enough knowledge.
I ask GhatGPT, and the reply is:
        However, despite the core code of Trezor being open-source, the hardware itself may contain proprietary components or chips that are not fully open. The functionality and code of these proprietary components may not be subject to public scrutiny. This means that even though the core code of Trezor is open-source, it is very difficult to completely ascertain the absence of backdoors on the hardware.

       I prefer Trezor than ledger, because of Trezor is open-source. I trust trezor and ledger. but I don't think it's wise to trust a company completely. In China, some small banks even deliberately run away with customers' deposits. In the United States, Silicon Valley banks collapsed. You can't 100% trust any institution, any government, any company.
        BTC's multi-signatures make it technically absolutely secure. Ethereum's multi-signature, by nature, does not provide any greater security than a single hardware wallet.

On my opinion, mainstream hardware wallets, like ledger, trezor, bitbox, keepkey, are better choices.

\
Thanks, USDC and DAI are better.

I have re-edited the message description, which should answer your question. thank you.

You mean DAI is safer than USDT？ Thanks.

You store USDT offline, and once you connect to the network, you change to a new wallet? That is using a one-time Ethereum wallet, which is similar to my second solution. Using my own generated mnemonic phrase is mainly to prevent wallet companies from leaving backdoors in the random number seeds of mnemonic phrases. You can use trezor's passphrases with at least 15 characters.

      前一个帖子，我研究了半个月，最安全的存储USDT的方法，只是存在ledger和trezor硬件钱包里。没有办法实现像比特币多重签名那样的绝对放心的方案，连物理隔离+trezor硬件钱包的双层保险方案都做不到。
      考虑到USDT也不是一种特别安全的稳定币，不一定适合长期存储，不如干脆换成人民币。
      对于出金，高手应该很多！我傻傻提几个问题，抛砖引玉吧。
      1）在中国，如果我建设银行涉黑被冻结了，其他银行的银行卡不会有事吧？
      2）如果我建设银行收到四万块钱，过几天没事，那我取出现金，存到工商银行。后面是不是就没屁事了？你也没办法证明我工行的钱来自建设银行？如果可行，那我就慢慢搬砖，一二个月，有多少钱都可以搬走。
      
      最后，币安交易所好像可以官方出金，相关网址见：https://www.binance.com/zh-CN/feed/post/1068866    有个视频，见：https://www.youtube.com/watch?v=efIlCXn4Qdo
视频上这个人通过币安官方通道出金，汇款方是汇元通。视频显示汇率1 USDT = 7.76港币，时间2023.7.26，当天美元对港币汇率1:7.81，手续费每笔26港币。博主说这个很保险，汇率看上去也可以。

      欢迎讨论，多多交流，人多力量大！

经过在英文社区的探讨，以及查询AI模型，对于如何安全存储USDT？归档，结论如下：
1）Genosis safe软件的多重签名，并不能提供比单个硬件钱包，如ledger或trezor更高的安全性！
     理由：不同于比特币，以太坊多重签名基于智能合约，曾经发生过智能合约漏洞，黑客偷盗数千万美元的事件。如果Genosis safe在合约上留后门或成功被黑客攻击，客户玩玩。即它存在单点故障，不像比特币的多重签名，必须几家知名公司合作作恶，才能偷窃比特币。既然如此，我还不如单纯就只用Ledger和trezor。没有证据表明，Genosis safe公司信誉比Ledger和trezor高得多，多重签名手续费也很贵，没得必要。
2）我没有找到一款支持trezor的，离线环境下可以使用的第三方钱包。也就是说，airgapped方案也难以实施。
3） 在离线电脑上生成一次性使用的以太坊钱包，用于存储USDT，可行，但是不方便。

总体来看，以太坊网络的安全性远不如比特币。

Agreeing with the perspective that Trezor is safer, if all of Trezor's code and firmware were open source, it would be impossible for any backdoors to exist. By diversifying and using both Trezor and another similar wallet (such as BitBox), the security level increases. However, Trezor is not completely open source, which means it cannot guarantee there is no backdoors.

I heard that Ledger plans to offer a service where users' private keys are split into two parts and uploaded to two different servers for separate storage. If such a service exists, I would not use Ledger anymore. It's important not to fully trust any institution, government (Especially corrupt governments, like mine.), or company.

Although Ledger and Trezor are extremely secure. However, Ledger and Trezor hardware wallets manage at least hundreds of billions of dollars. How can you ensure they won't act maliciously? How to guarantee absolute security?

In the United States, if you are not concerned about receiving illicit funds, you can directly convert BTC to USD instead of USDT, which is considered safer. In China, there are no legally operating exchanges, and converting to Chinese yuan may involve the risk of receiving illicit funds. It might be better to hold USDT, as it avoids potential involvement with illicit funds.

Although there have been no malicious cases of hardware wallets such as Ledger and Trezor so far. When I saw someone mention: "How can you trust a company in a distant place not to steal your money?" I still don't feel relieved. If there is a storage method on the Ethereum network that is as secure as Bitcoin's multi-signature, it will be foolproof.

I currently only hold Bitcoin, if one day the price is too high, I want to sell it and convert it to USDT. When the price is low, buy back Bitcoin. In this way, my Bitcoin will increase more and more. A single hardware wallet is not safe enough. I live in Asia, and Ledger and Trezor are in Europe. What if they themselves do evil? At least two independent well-known companies must jointly guarantee, that is safe enough. For example, Bitcoin's multi-signature, as well as airgapped wallet + trezor. I haven't found a suitable wallet that supports Trezor in an offline environment.

        For Bitcoin, multi-signature technology has undergone extensive testing and is supported by various software. Using electrum software, and both ledger and trezor hardware wallets, (or more different brand hardware wallets, like bitbox, keepkey), you can generate a multisig wallet, 2-of-2, or 3-of-5,...   Each transaction needs all signatures of different brand hardware wallets.  This is a good way to prevent individual wallet companies from doing evil. This is very very safe, and is a true decentralized solution.
        However, Unlike Bitcoin, Ethereum's multi-signature is based on smart contracts, and there have been instances of smart contract vulnerabilities where hackers have stolen tens of millions of dollars. If Genosis safe (Maybe the only software, which supports the Ethereum's multi-signature) leaves a backdoor in the contract or is successfully hacked, then the clients all die. That is, it has a single point of failure, unlike Bitcoin's multiple signatures.Moreover, there is no evidence that Genosis safe is much more reputable than Ledger and trezor. The multi-signature of Genosis safe software, then, does not provide any more security than a single hardware wallet, such as ledger or trezor!
        Another solution is that: Using trezor hardware wallet (the mnemonic word is generated myself by python, then the trezor company will never know it. This prevents a random number seed backdoor for setting mnemonics), and a third-party software in an offline environment, which provides a double-layer security protection(For BTC, the trezor never be connected to network, and the only way to reveal the mnemonic is through the two-dimensional code of trezor's signature displayed by electrum's software). However, I cannot fine a proper software, that support the trezor's signature in offline environment.
        So maybe the best choice for me is: Generate a mnemonic phrase through programming by myself, input it offline into a Trezor wallet, and use the Metamask software to read the Ethereum address offline. After that, store USDC and DAI, and use the wallet only once.

        Final question: Why do I want to store USDC, DAI, USDT? Everyone knows that the price of bitcoin has a cycle, when the price is too high, sell it for USDC and DAI, wait for the price to come down (about 1-1.5 years), and then buy back Bitcoin. A better solution would be to sell the bitcoins and exchange them for dollars or euros, or some other local currency. In my country,  cryptocurrency trading is not legal, it is easy to receive illegal  money on Binance, and bank cards will be frozen.

Huobi, Binance, and OKEx do not support L-USDT. I cannot trade it on these platforms. Thank you. I will seek advice elsewhere regarding this issue.

你如何能相信网页内容？建议更安全的获取方式：
      人工智能模型，百度文心一言：https://yiyan.baidu.com/      不用翻墙
       GhatGPT: https://poe.com/   这个有多种语言模型，需要一个google账户才能登录，需要翻墙。
语言模型也可能错，多问几种语言模型，互相核对。最后再检查网页SSL证书。

       我周围的中国人普遍不重视安全，挣点辛苦钱不容易，不要怕麻烦。

I have already discussed how to securely store Bitcoin. For me, it is impossible to never use USDT.
Now, let's talk about how to securely store the Ethereum token USDT and share my thoughts with everyone here!
One feasible solution is to generate disposable Ethereum wallets. Since Bitcoin operates on a four-year cycle, using two disposable Ethereum wallets per cycle is sufficient. Here is the plan:
Utilize the Passphrase feature of Trezor, which combines a mnemonic phrase and passphrase to generate a disposable Ethereum wallet. This way, you only need to change the passphrase without altering the mnemonic phrase, which is very convenient. Yesterday, I tried two software programs, Metamask and Exodus Wallet, which support the Passphrase feature of Trezor hardware wallets and allow the generation of Ethereum addresses in an offline environment.
The passphrase should be at least 15 characters long. I have tried using an RTX 3090 graphics card to crack WinRAR passwords consisting of numbers and lowercase letters, with an 8-character password taking approximately 1 hour to crack. Considering the hardware and electricity costs, let's assume the expense is 0.1 dollar. The cost of cracking a 15-character password would be significantly higher. To be even more secure, it is recommended to use a completely random password consisting of 20 characters of numbers and letters.

谢谢！

我在网上查了，有2种可能：1）下载了假钱包；2）electrum钱包使用了弱密码，被黑客暴力破解。
我的养老钱都存在electrum钱包了，希望这个软件本身没作恶。

给大家推荐一下，使用AI技术查询核对官网，
         百度文心一言：https://yiyan.baidu.com/
         ChatGPT: https://poe.com/  上面有多个人工智能语言模型
仅仅是多一重核对保障，查询钱包官网时，多处核对。AI模型也经常说错，我试过了。有比没有强。免费的。