A good reason why we shouldn't buy wallet from third-parties

[tabas]

So far, the two wallets with massive loss after the hack are both closed source wallets (coldcard and ledger). With these hack news around the corner recently, I think it's better for me to set up Electrum cold storage hardware wallet for maximum security because the set up will be done in a safe environment and with an airgapped device instead, of buying a hardware wallet that will move from one hand to another before getting to you. Imagine that, you bought a wallet to keep your coins safe and that same wallet lost your coins. You wasted your money, time and effort at the same time.

Yeah, nothing beats the old traditional way of keeping our funds since we've started. Go with electrum and just keep the bitcoin there that we have. While it has got some added security but with all of these hacking that we're witnessing, it is only creating more fear for the hardware wallets. But for the competitors, this is also a time for them to prove that they're worth more than the others and that's through proving how strong their security is and also going after their resellers by having routine checks.

[Dave1]

From a Ledger authorised reseller? Ledger needs to take the blame and they should be responsible for this loss, this is not a third party situation it's directly from a reseller that Ledger team trusted.

Ledger is not the one who tampered the hardware that CryptoBilis is selling. And for the context of history, CryptoBilis has a new owner, as it was sold recently. And that's where the tampering happened when the new owner takes over. It is also said that the old owner should be held accountable, however, they don't have accessed to any of it as obviously they are hands off already.

As for buying, I do understand, with the Coldcard incident and now this one, we should really be very careful. We might go back to the old and traditional way of keeping our Bitcoin safes and no longer trust this 3rd party wallets.

[X-ray]

So far, the two wallets with massive loss after the hack are both closed source wallets (coldcard and ledger). With these hack news around the corner recently, I think it's better for me to set up Electrum cold storage hardware wallet for maximum security because the set up will be done in a safe environment and with an airgapped device instead, of buying a hardware wallet that will move from one hand to another before getting to you. Imagine that, you bought a wallet to keep your coins safe and that same wallet lost your coins. You wasted your money, time and effort at the same time.

Yeah, nothing beats the old traditional way of keeping our funds since we've started. Go with electrum and just keep the bitcoin there that we have. While it has got some added security but with all of these hacking that we're witnessing, it is only creating more fear for the hardware wallets. But for the competitors, this is also a time for them to prove that they're worth more than the others and that's through proving how strong their security is and also going after their resellers by having routine checks.

I wouldn't be too hasty to make that conclusion, a DIY airgapped cold wallet have its share of risk like supply chain attack too, but instead of getting reseller forging fake hardware wallet or implanting spywares, you got hackers deploying malicious code from the open source library software used by the DIY cold wallet devices.

If you want to use electrum with mini PC for example, you better vet it before using it and the fact that most mini PC comes from china with sketchy preloaded apps and you need to take off the wifis, bluetooth, and other thing that may potentially become an attack surface.

Hardware wallet with direct manufacturer shipping and open source software is still very safe.

[lovesmayfamilis]

The second option isn't great either. When buying the hardware wallet from the official manufacturer, you might encounter a different problem: a leak of the personal data (full name, shipping address, etc.) provided during the purchase - something that has actually happened repeatedly, including quite recently with Trezor (in September).

You could purchase directly from Ledger using false personal information, but even then you would still have other risks.  It is not only like russian roulette, you pay for it!

You are currently communicating with someone who was a direct seller and participated in the sale of these wallets with or without a referral link (I don't know), but with bonuses that people were very interested in. Therefore, we could better learn about all the risks that buyers could expect from such sellers or agents, because everything that happens behind the scene is most often of interest to those who are in this environment.😉
https://bitcointalk.org/index.php?topic=5049582.0

[knowngunman]

First it was ColdCard, we got through that already, and now it's Ledger, Cryptobilis or whatever it's called needs to be arrested, it's possible that this seller tampered with every Ledger purchased from him or them.

Allegedly though.

People that were affected by the ColdCard incident haven't gone through it.

There is a way to check if your device is genuine or not but I believe many people don't bother to go through that process but this is not the right time to discuss that. We can not call for Cryptobilis arrest now because nothing has been found against him yet. Until the ongoing investigation is concluded, nothing can be done now other getting our fingers crossed.

Let not forget that he's an approved reseller of Ledger which means ledger trusted him. Of course, they did due diligence before approving him. So until something is proven, we can only be observing.