BC Vault hardware wallet - is this a reasonable answer to a question?

[alien2108]

Hello all!

As I promised, we did listen to your input and implemented the export private key in a way, that we feel is safe enough for the user to do it in a way, where the exposure risk is at minimal. Following is the procedure:

- BC Vault has to be booted in special mode for private key reveal to work (you hold down a key when you plug it in)

- Advanced mode has to be enabled in the application

- You will then see "Reveal private key" option by each wallet (small red key icon on the right):


- Once you choose to reveal the private key, your wallet will be marked "Not secure" forever. Same as we already have for all imported wallets (we already did support import of private keys, as mentioned)

- You will then confirm the reveal on the device itself:


- Finally you get "your precious one":


Displaying the private key on the device insures (as opposed in the application), that the key still was not exposed on anything connected to the internet. It is now your choice to either write it down, take a picture on film, etch it on glass with Daguerreotype...or simply trust your phone camera and take a digital picture (careful!)

And they say big display is not so important?

Public release is scheduled for next minor release of application+fw (very soon).

[1715438549]

1715438549

[1715438549]

1715438549

[1715438549]

1715438549

[alien2108]

Version 1.3.2 with private key reveal was just released!

See this KB Article on support page!

[alien2108]

Additionally we released the Aluminum versions of BC Vault and since it is Black Friday today, special price is also available!

P2WPKH support also added!

[davewho]

I am the original poster of the question on this forum. Thanks for listening to us alien2108 and for your responses. I will follow your progress with your vault. Unfortunately this time I went with a different vendor, but I still really like your product. I hope you become a big comptetitor to the other devices out there.

[alien2108]

Thank you for raising the concerns and I hope we did provide you with proper answers!

[kashmiiir]

I am glad that you incorporated exportation of the seed, as I was very interested in your wallet but hesitant due to the seeds being ”locked” to the BC Vault. Will there be a christmas discount?

[alien2108]

Hey!

Thank you for your support, we sure hope you will become a user in the future. Yes there is a code available, that is valid up to end of the year in our shop: "christmas10bcvault" Expiry date 2019-12-31.

[kashmiiir]

Hey!

Thank you for your support, we sure hope you will become a user in the future. Yes there is a code available, that is valid up to end of the year in our shop: "christmas10bcvault" Expiry date 2019-12-31.

Thank you, sure planning to do so. Are there any independent audits of your Wallet that will be released in the near future?

[alien2108]

Yes, wallet is already undergoing testing, but this things take a lot of time. So once they will be made, we will of course publish them!

[kashmiiir]

Yes, wallet is already undergoing testing, but this things take a lot of time. So once they will be made, we will of course publish them!

Excellent, looking forward to read the audit!

[alien2108]

Hey all!

As promised BC Vault did complete hardware certifications, radio certifications and of course the most important thing complete security assessment (software+firmware+services - architecture review, SW+HW pentest, Source code review) review by independent external organisation - SIQ (TÜV in Slovenia, responsible for all worldwide standard certifications - CE, EMC, RoHS...).

https://bc-vault.com/2020/05/bc-vault-completes-security-assessment-by-siq/
https://bc-vault.com/2020/04/bc-vault-successfully-completed-conformity-certificate/

[dkbit98]

Did you know that every purchased BC Vault hardware wallet is shipped with pre-loaded 1 Bitcoin?
Yes, if you order their hardware wallet you will get device with privatekey and 1 Bitcoin worth 50k at this time, BUT there is a catch and you could claim it only if you break their encryption.
This is also available for everyone to see on their website:

Each and every BC Vault ships pre-loaded with 1.0 BTC. If you break the encryption on it, its yours!

https://bc-vault.com/
archive: https://archive.vn/iXT6N

Bad thing about this wallet is that everything is closed source but they say they will release it as open source if they go bust  
https://github.com/bc-vault

[alien2108]

Indeed!

Bounty wallet of 1BTC (Actually 1.17) is preloaded on every unit, it is exactly the same as every wallet you create. You hack it, it is yours!

BC Vault did independent security audit (including architecture, hardware, sources!): https://bc-vault.com/2020/05/bc-vault-completes-security-assessment-by-siq/

You can also always export RAW PRIVATE KEYS (our infrastructure NOT needed): https://support.bc-vault.com/a/solutions/articles/43000543089

Did you know that every purchased BC Vault hardware wallet is shipped with pre-loaded 1 Bitcoin?
Yes, if you order their hardware wallet you will get device with privatekey and 1 Bitcoin worth  50k worth bitcoin paid around, BUT there is a catch and you could claim it only if you break their encryption.
This is also available for everyone to see on their website:

Each and every BC Vault ships pre-loaded with 1.0 BTC. If you break the encryption on it, its yours!

https://bc-vault.com/
archive: https://archive.vn/iXT6N

Bad thing about this wallet is that everything is closed source but they say they will release it as open source if they go bust 
https://github.com/bc-vault

[tcastro]

Hello There,

Its my firs time here posting message, nice to meet all there.

I´m in a big real trouble and if i´m in a wrong place, tell me where i must go...

I have BC Vault with 2 Wallets, but i wrote my Wallet Password / Pin from Wallet 2 wrong in a paper.

Global Password - Ok
Global PIN - Ok
Wallet Password or Wallet PIN [Wrong]

What alternatives i have in this situation? Somebody has some experience / solution for this?

It´s possible i´m write some program to try passwords by combination and try automatically ?

[alien2108]

Please contact support@bc-vault.com

You will have to get it right, this is the sole purpose of the device - protect private keys and allow access only with correct credentials.

[tcastro]

Please contact support@bc-vault.com

You will have to get it right, this is the sole purpose of the device - protect private keys and allow access only with correct credentials.

Ok, I'm doing this, but it hasn't been easy days, it's my economics of life  and father in my wallet , and i know that i'm responsible for this situation, but i hopely expect that BC Vault team help me.

[eliaspoliceno]

Hey guys, i am trying to solve this question in this github repo:
https://github.com/eliaspoliceno/decrypt-bcvault

I think BCVault is a great device, but i also think that sending backup files to anyone is not a secure thing to do.
So i am trying to decrypt it by myself.

Maybe

alien2108

could help us a bit? Or even play a hot and cold game guiding us?
I know all the info in this brand new device, global and wallet pass and pin. I need to know now:

• Which algorithm to use, in which mode, and where to find the extra parameters? Is it an AES-256 CBC as i am suspecting?
• After decrypting the outer block, where the innner block starts? Is it the same algorithm, same mode, in the same way to find parameters?
• Finally, after decrypting, how can i read back the private key from the resulting byte array?

Hope to be successful!

[alien2108]

Good luck Nice effort, but looong loong way from success.

We implemented proprietary security mechanisms (using standard aes256 of course) and thus we do not provide any shortcuts.

Sole purpose of any crypto wallet is to NOT MAKE IT EASY to even try to approach brute forcing….latest example of this is Ledger users receiving FAKE LEDGERS with changed software etc..sad but true. Open source is two edge sword and one edge is hackers exploiting it.

I wish you luck with trying the passwords.

[dkbit98]

Sole purpose of any crypto wallet is to NOT MAKE IT EASY to even try to approach brute forcing….latest example of this is Ledger users receiving FAKE LEDGERS with changed software etc..sad but true. Open source is two edge sword and one edge is hackers exploiting it.

Ledger is NOT open source same as bc vault so I don't know why you would mention this in same content.
Much greater danger is coming from hardware wallets with closed source code with potentially hidden and dormant backdoors that can stay asleep for years before activation.
If federal agents can wait 3 years and create anom phones, I don't see why doing the same for hardware wallets would be any trouble for them.

[alien2108]

A lot of their code is open source. Trezor also had same issues with fake devices due to open source (source: https://blog.trezor.io/psa-non-genuine-trezor-devices-979b64e359a7?gi=17785e898fa5)

Fake Ledgers: https://www.google.com/amp/s/www.forbes.com/sites/leemathews/2021/06/18/cybercrooks-are-mailing-users-fake-ledger-devices-to-steal-their-cryptocurrency/amp/

Well there is a lot of options and you always choose what you think is good for you! Diversity and competition drives the development and improvement.