Bitcoin Forum
August 07, 2026, 04:20:20 AM *
News: COLDCARD users only: critical vulnerability risks funds stored on COLDCARD devices; immediate action required
 
   Home   Help Search Login Register More  
Pages: « 1 2 [3]  All
  Print  
Author Topic: We can all learn one or two from this ColdCard incident  (Read 489 times)
Outhue
Hero Member
*****
Offline

Activity: 1652
Merit: 677



View Profile WWW
August 06, 2026, 07:35:59 AM
 #41

Airgapped computers are risky to setup and use.
How is it risky?

Airgapped computers means you are not sending anything out of the wallet in a way that you can be affected. If you have airgapped wallet, you are safe so far it stayed airgapped but stay away from crypto clipper.

But I will likely if you correct me because my understanding about the cold airgapped device may be limited.

I've used airgapped computers for my wallet for quite sometime, I don't find it any more riskier than hardware wallet. You installed latest OS to an airgapped computer, you never connect it to the Internet and the wallet stays on the computer.

No supply chain attack which hardware wallet could be infected from, no accidental seed phrase leak because the internet isn't there in the first place, your wallet stay safe until the day you decided to withdraw it. I think it's robust enough solution for me, but it's just my opinion.

To be honest though, setting up one is a pain to do, you need to verify the stack and keep updated on latest exploit which going to take a lot of your time, which is why I also own hardware wallet.

Let's say that you can handle this perfectly, I am not new to Bitcoin but I can't do this same thing that you are doing, because of few reasons like I am not living alone, my computer isn't private and others, you can go out and someone startup your computer and connect it to the internet, unless you live alone all by yourself.

Also airgapped devices comes with extra security, if anyone tries to tamper with em they can self wiped themselves, talking for Keystone wallet though, I don't know about the rest, but if someone wants to tampered with that PC or Laptop behind your back they would successfully do it, but like I've just said, if you can handle it right then no problem, only that it's not for everyone.

PostQuantumBTC
Full Member
***
Offline

Activity: 322
Merit: 153


Bitz.io Best Bitcoin and Crypto Casino


View Profile
August 06, 2026, 09:13:25 AM
 #42

To be honest though, setting up one is a pain to do, you need to verify the stack and keep updated on latest exploit which going to take a lot of your time, which is why I also own hardware wallet.

I do not see any difficulty in setting up a wallet on an airgapped device, it was simple for me to do. Another thing is that if you are also not updated with exploit updates and knowing how to avoid hackers, hardware wallet can not save your coins from the hackers. Hackers also target hardware wallet users specifically.

bitmover
Legendary
*
Offline

Activity: 3122
Merit: 7657


Trêvoid █ No KYC-AML Crypto Swaps


View Profile WWW
August 06, 2026, 10:12:18 AM
Merited by vapourminer (1)
 #43

Airgapped computers are risky to setup and use.
How is it risky?

Airgapped computers means you are not sending anything out of the wallet in a way that you can be affected. If you have airgapped wallet, you are safe so far it stayed airgapped but stay away from crypto clipper.

But I will likely if you correct me because my understanding about the cold airgapped device may be limited.

I've used airgapped computers for my wallet for quite sometime, I don't find it any more riskier than hardware wallet. You installed latest OS to an airgapped computer, you never connect it to the Internet and the wallet stays on the computer.

No supply chain attack which hardware wallet could be infected from, no accidental seed phrase leak because the internet isn't there in the first place, your wallet stay safe until the day you decided to withdraw it. I think it's robust enough solution for me, but it's just my opinion.

To be honest though, setting up one is a pain to do, you need to verify the stack and keep updated on latest exploit which going to take a lot of your time, which is why I also own hardware wallet.

There is a risk of supply chain attack, accidental seed phrase leak, everything.

The risk is exactly in the step you called a "pain to do". Setting it up. If you dont know exactly what you are doing,  you can expose yourself to those risks

When you buy a good hardware wallet (not coldcard), you are theoretically free of all those risks.

▄▄████████████████████▄▄
▄███████▀▀██████▀▀███████▄
████████████████████████
████████▄▄██████▄▄██████

████████████████████████
██▄▄█████████████▄▄██████
██▀▀██████████████████▄▄██
██████▀▀██████████████▀▀██
██████████████████████████
██████▀▀██████▀▀████████
████████████████████████
▀███████▄▄██████▄▄███████▀
▀▀████████████████████▀▀
 
 DΞX.fo 
▄▄██████
█████████
██████████
█████████
██████████
█████████
▀▀██████

▄███████
▄██████████
████████████
█████████████
█████████████
|
▄▄█
▄████▀
▄███▀
▄██▀▄██
█████▀▀
███████
████████
▀██▄████
▄████▄▄
▄█████▀███
▄█████▀████
█████▀███████
▀██▀█████████
|  BTC     XMR  
  DAI     LTC  
   Fees  0.8%    
Z-tight
Legendary
*
Offline

Activity: 1680
Merit: 1311



View Profile
August 06, 2026, 05:14:28 PM
 #44

To be honest though, setting up one is a pain to do, you need to verify the stack and keep updated on latest exploit which going to take a lot of your time, which is why I also own hardware wallet.
Setting up a wallet in an airgapped device is not so newbie-friendly, that's why the community recommends hardware wallets to newbies, as it is easier for them to use safely. An airgapped wallet has to be set up in a safe environment and you ought to know what you are doing, so you don't lock yourself out of your funds.

However, if you are using a recommended wallet software, you do not need to constantly verify anything. E.G., if you set up Electrum in an airgapped device, which is a well-reviewed wallet, then you're good if you do everything correctly locally.

▄▄████████████████████▄▄
▄███████▀▀██████▀▀███████▄
████████████████████████
████████▄▄██████▄▄██████

████████████████████████
██▄▄█████████████▄▄██████
██▀▀██████████████████▄▄██
██████▀▀██████████████▀▀██
██████████████████████████
██████▀▀██████▀▀████████
████████████████████████
▀███████▄▄██████▄▄███████▀
▀▀████████████████████▀▀
 
 DΞX.fo 
▄▄██████
█████████
██████████
█████████
██████████
█████████
▀▀██████

▄███████
▄██████████
████████████
█████████████
█████████████
|
▄▄█
▄████▀
▄███▀
▄██▀▄██
█████▀▀
███████
████████
▀██▄████
▄████▄▄
▄█████▀███
▄█████▀████
█████▀███████
▀██▀█████████
|  BTC     XMR  
  DAI     LTC  
   Fees  0.8%    
I_Anime
Hero Member
*****
Offline

Activity: 1204
Merit: 520



View Profile
August 06, 2026, 07:34:03 PM
 #45

Hardware wallet is the best to store your assets but don’t make it 100% safe there’s nothing like 100% when come to the crypto space. Hardware wallet has its own disadvantages too , like sometimes physical effects can damage it , like fire, water or you lose it (but can be recover if you have your seed phrase well save). And for those that are too lazy to write down their seed phrase and keep to a place safe and accessible, start writing it down now and stop saving it in your device just writing it down will save you a fortune .

X-ray
Hero Member
*****
Offline

Activity: 3696
Merit: 565


Leading Crypto Sports Betting & Casino Platform


View Profile
Today at 01:24:02 AM
 #46

I do not see any difficulty in setting up a wallet on an airgapped device, it was simple for me to do. Another thing is that if you are also not updated with exploit updates and knowing how to avoid hackers, hardware wallet can not save your coins from the hackers. Hackers also target hardware wallet users specifically.
Setting it up, installing OS etc is easy, the hard part is exactly what you mentioned, keeping up with the exploit updates and verify that you got the right files.

You need to verify authenticity with checksums for all the software you're going to install and search for latest exploit to make sure you're not installing vulnerable version.

If you want to be able to spend from the wallet inside airgapped computer, you also need to set up watch only wallet to create unsigned tx, sign it on your airgapped computer, then send it back again. If you've got time to do that, it is doable but honestly you almost certainly will crave for a simpler method but also secure which is hardware wallet.

Setting up a wallet in an airgapped device is not so newbie-friendly, that's why the community recommends hardware wallets to newbies, as it is easier for them to use safely. An airgapped wallet has to be set up in a safe environment and you ought to know what you are doing, so you don't lock yourself out of your funds.

However, if you are using a recommended wallet software, you do not need to constantly verify anything. E.G., if you set up Electrum in an airgapped device, which is a well-reviewed wallet, then you're good if you do everything correctly locally.
Exactly and the price if compared to buying a brand new hardware wallet, almost roughly the same if you don't have old laptops lying around, even then old laptop might have security flaw on its old hardware.

..Stake.com..   ▄████████████████████████████████████▄
   ██ ▄▄▄▄▄▄▄▄▄▄            ▄▄▄▄▄▄▄▄▄▄ ██  ▄████▄
   ██ ▀▀▀▀▀▀▀▀▀▀ ██████████ ▀▀▀▀▀▀▀▀▀▀ ██  ██████
   ██ ██████████ ██      ██ ██████████ ██   ▀██▀
   ██ ██      ██ ██████  ██ ██      ██ ██    ██
   ██ ██████  ██ █████  ███ ██████  ██ ████▄ ██
   ██ █████  ███ ████  ████ █████  ███ ████████
   ██ ████  ████ ██████████ ████  ████ ████▀
   ██ ██████████ ▄▄▄▄▄▄▄▄▄▄ ██████████ ██
   ██            ▀▀▀▀▀▀▀▀▀▀            ██ 
   ▀█████████▀ ▄████████████▄ ▀█████████▀
  ▄▄▄▄▄▄▄▄▄▄▄▄███  ██  ██  ███▄▄▄▄▄▄▄▄▄▄▄▄
 ██████████████████████████████████████████
▄▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▄
█  ▄▀▄             █▀▀█▀▄▄
█  █▀█             █  ▐  ▐▌
█       ▄██▄       █  ▌  █
█     ▄██████▄     █  ▌ ▐▌
█    ██████████    █ ▐  █
█   ▐██████████▌   █ ▐ ▐▌
█    ▀▀██████▀▀    █ ▌ █
█     ▄▄▄██▄▄▄     █ ▌▐▌
█                  █▐ █
█                  █▐▐▌
█                  █▐█
▀▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▀█
▄▄█████████▄▄
▄██▀▀▀▀█████▀▀▀▀██▄
▄█▀       ▐█▌       ▀█▄
██         ▐█▌         ██
████▄     ▄█████▄     ▄████
████████▄███████████▄████████
███▀    █████████████    ▀███
██       ███████████       ██
▀█▄       █████████       ▄█▀
▀█▄    ▄██▀▀▀▀▀▀▀██▄  ▄▄▄█▀
▀███████         ███████▀
▀█████▄       ▄█████▀
▀▀▀███▄▄▄███▀▀▀
..PLAY NOW..
hd49728
Legendary
*
Offline

Activity: 2912
Merit: 1364



View Profile
Today at 03:34:16 AM
 #47

Setting it up, installing OS etc is easy, the hard part is exactly what you mentioned, keeping up with the exploit updates and verify that you got the right files.
People must avoid using cracked OS because it is very dangerous in security. If it's not feasible for them to buy it to use, they can consider to use open source OS like Linux.

https://linuxmint.com/

Quote
You need to verify authenticity with checksums for all the software you're going to install and search for latest exploit to make sure you're not installing vulnerable version.
For examples, there are guides to verify Bitcoin Core software and Electrum wallet software.
[GUIDE] How to Safely Download and Verify Electrum.
The paranoid user's security guide for using Electrum safely.
Bitcoin Core download and verification guide.

Quote
If you want to be able to spend from the wallet inside airgapped computer, you also need to set up watch only wallet to create unsigned tx, sign it on your airgapped computer, then send it back again. If you've got time to do that, it is doable but honestly you almost certainly will crave for a simpler method but also secure which is hardware wallet.
This guide
How to create a cold storage wallet in Electrum.

Not all people understand correctly about air-gapped devices and necessary steps to have an air-gapped device. Physical items that can connect the device to Internet need to be removed all.
[Guide] Secure air-gapped crypto wallet storage method.

yhiaali3
Legendary
*
Online Online

Activity: 2520
Merit: 2652



View Profile WWW
Today at 04:04:12 AM
 #48

Yes, this incident taught us many lessons, the most important of which is that there is no complete security in crypto unless you take the highest security and safety standards. The biggest mistake is to think you are safe just because you use a hardware wallet.

The security level should be increased to the highest level by adding a passphrase to the seed, or by using multiple signatures and most importantly, not putting all your eggs in one basket. It is very important to distribute assets across more than one wallet in anticipation of the worst-case scenario.


███████▄▄███▄███▄
███▄▄████████▌██
▄█████████████▐██▌
██▄███████████▌█▌
███████▀██████▐▌█
██████████████▌▌▐
████████▄███████▐▐
█████████████████
███████████████▄██▄
██████████████▀▀▀
█████▀███▀▀▀

▄▄▄██████▄▄▄███████▄▄▄
███████████████████████████
███▌█████▀███▌█████▀▀███████████▄▄▄▄▄▄▄▄
███▌█████▄███▌█████▄███▐███████████████████▄
▐████████████▀███████▄██████████▀▀▀▀▀▀▀▀████▀
▐████████████▄██▄███████████▌█████████▄████▀
▐█████████▀█████████▌█████████████▄▄████▀
██████████▄███████████▐███▌██▄██████▀
██████████████▀███▐███▌██████████████████████
████▀██████▀▀█████████▌███▀▀▀▀███▀▀▀▀▀▀▀████▌
 
      P R E M I E R   B I T C O I N   C A S I N O   &   S P O R T S B O O K      

█▀▀









▀▀▀

▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀

  98%  
RTP

 
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀

▀▀█









▀▀▀

█▀▀









▀▀▀

▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀

 HIGH 
ODDS

 
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀

▀▀█









▀▀▀
 
..PLAY NOW..
Pages: « 1 2 [3]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!