Another month, more news about hardware wallet incidents. A sad recurrence.

[greysonz]

We're facing a major crisis of trust in hardware wallets, which until relatively recently were considered the best way to store your bitcoins. Look at the picture and you'll see a new incident every month. And which wallet will we hear about in November? I'd prefer none at all. And if hardware wallet manufacturers don't take action now, the list will go on. They need to know every detail of their assembly lines and undergo code audits, both with the help of the latest AI models and with the help of specialists.
Mistakes are too costly.
And unfortunately, the ones who pay for them are the users who were careful and survived crises and market crashes.


https://x.com/SolanaSensei/status/2114257912424227152

[Upgrade00]

The recurrent problem with most cases is data leaks, some have suggested actions like anonymous shipping, which should be live in EU now for trezor users, if they kept to their timeline. This protects sensitive date from being available to multiple parties and potentially get leaked.

The issue with most consequence however is ones like the device tampering or faulty seed generation that directly leads to loss of funds without the user being able to protect themselves. Situations like that should never occur and it's down to the service to make sure that they do not. They should have open source codes and key guidelines for users to do after purchasing.

[Pmalek]

The core assumption hasn't changed. Hardware wallets remain a good and safe way to store your bitcoin and crypto. Other factors that can affect your security and privacy have changed, though. You can buy your device online and your data can leak. That affects your privacy, not the security of your coins. You can buy a modified device like we saw with Ledger and suffer financial losses. That affects the security of those units only. These things can be avoided, either with share luck or different planning (for buying and shipping hardware wallets).

The worst fu**up of all those cases mentioned is Coldcard. Their users did everything they could and should have and still lost money. The only other thing they could have done if they knew how to was to inspect the publicly available code, but no one did it properly. Coldcard's actions directly impacted the problems the users suffered. In all the other cases, it was an outside party that caused problems.

[greysonz]

The core assumption hasn't changed. Hardware wallets remain a good and safe way to store your bitcoin and crypto. Other factors that can affect your security and privacy have changed, though. You can buy your device online and your data can leak. That affects your privacy, not the security of your coins. You can buy a modified device like we saw with Ledger and suffer financial losses. That affects the security of those units only. These things can be avoided, either with share luck or different planning (for buying and shipping hardware wallets).

The worst fu**up of all those cases mentioned is Coldcard. Their users did everything they could and should have and still lost money. The only other thing they could have done if they knew how to was to inspect the publicly available code, but no one did it properly. Coldcard's actions directly impacted the problems the users suffered. In all the other cases, it was an outside party that caused problems.

Then we can compare the situation to what happens during an immune system test: the body gets sick, but then recovers and becomes stronger.
Perhaps I was too critical about hardware wallets, and perhaps this is all just a phase of their strengthening. And you were right to mention Coldcard, clarifying the details. And I want to add that they reacted completely inappropriately to the wave of hate in the comments.
In their situation, they should have remained as open as possible, but they chose this:

[The Cryptovator]

Perhaps I was too critical about hardware wallets, and perhaps this is all just a phase of their strengthening. And you were right to mention Coldcard, clarifying the details. And I want to add that they reacted completely inappropriately to the wave of hate in the comments.
In their situation, they should have remained as open as possible, but they chose this:

Everyone should be critical about their funds, so when funds have been stored into the hardware wallet, it means we have to be critical about the hardware wallet as well. Since incidents happen, they should be friendly enough to support and hear back from their users. Banning on social media won’t be a wise decision at all.

Back to the main post; it’s really disappointing how hardware wallets users have been suffering nowadays. If this kind of accident keeps happening, then how may we secure your funds? To be honest, these hardware companies should be more careful and open for discussion. How would we avoid such incidents? They shouldn’t store users' data to avoid leaking it and shouldn’t assign any reseller where it's even hard to trust delivery companies.

[Zaguru12]

Back to the main post; it’s really disappointing how hardware wallets users have been suffering nowadays. If this kind of accident keeps happening, then how may we secure your funds? To be honest, these hardware companies should be more careful and open for discussion. How would we avoid such incidents? They shouldn’t store users' data to avoid leaking it and shouldn’t assign any reseller where it's even hard to trust delivery companies.

I wouldn’t talk about the seed generation vulnerability with coldcard and the tampering of the ledger hardware wallets because this were rare cases that I would advice any one using any of this wallets should seriously consider throwing them away.

As for the data leaks I still understand why hardware wallets still do not seems to learn and stop keeping users data stored in their server but this to me should be a lesson to many buyers of hardware wallets to learn how to use burner details like throway emails, not giving the courier or the company your home address rather using Post offices very close to you or any company address not related to you, such that in case there is a data leak, the wrench attackers do not find themselves to your home or office.


Then another important thing I think most of us need to look into is trying to build our own cold wallets using airgapped device which we can make ourselves and getting this devices will definitely not be more expensive than getting an hardware wallet. One can use any of the reputable software wallet wallets that supports cold wallet like electrum although they are not totally free from vulnerabilities themselves but they are definitely better off than hardware wallets with reoccurring leaks of data and other informations

[Pmalek]

How would we avoid such incidents? They shouldn’t store users' data to avoid leaking it and shouldn’t assign any reseller where it's even hard to trust delivery companies.

They are required by law to store data on their customers for tax purposes, legal reasons, shipping, and other reasons. Hardware wallets have warranties. Usually 1-year warranties but maybe longer. If they deleted all data before that and someone contacted them complaining about their device not working while it's still under warranty, they wouldn't know who that is and when they purchased the wallet.

Resellers exist and are crucial in all industries, especially in regions a company can't reach for whatever reason.

[Meuserna]

All of this just reinforces my belief that DIY is the way to go for those who are able to do it.

And it isn't hard. Anybody who used a ColdCard already knows how to use an airgapped device and a real watch-only wallet app like Sparrow for desktop or BlueWallet for mobile. Pair that up with a SeedSigner and you're set.

Take one extra step by generating your own random seed phrase by hand and you've solved every vulnerability people are experiencing with hardware wallet thefts. Install ShieldSigner instead of SeedSigner and you've increased your security to a point that no commercially available hardware wallet can even match...

...airgapped, stateless, fully open source, encrypted seed QR, passphrase QR, and so much more...

...but for some reason, most people want to trust a company even though that goes against the entire ethos of Bitcoin.

I love Bitcoin so much, but often, I do not understand Bitcoiners.

Go DIY and you'll wonder why you didn't make that upgrade sooner.

[Dogedegen]

How would we avoid such incidents? They shouldn’t store users' data to avoid leaking it and shouldn’t assign any reseller where it's even hard to trust delivery companies.

They are required by law to store data on their customers for tax purposes, legal reasons, shipping, and other reasons. Hardware wallets have warranties. Usually 1-year warranties but maybe longer. If they deleted all data before that and someone contacted them complaining about their device not working while it's still under warranty, they wouldn't know who that is and when they purchased the wallet.

Resellers exist and are crucial in all industries, especially in regions a company can't reach for whatever reason.

Your points are all true, but there are ways to go around those issues if they really wanted to. Why does the data have to stay accessible in a digital form? Can't it be shortly be removed from those system and archived in an offline form? Surely the percentage of customers who actually go back there and whose data is needed actively is very very low, I would guess less than 1%. Wasn't there a VPN provider that does not even use emails and it is fully legal and in Europe? How are they able to sell the service without storing data about the customers? If there is a will, there is a way! Don't excuse laziness and incompetence.

All of this just reinforces my belief that DIY is the way to go for those who are able to do it.

Which is appropriate for what, like 1% or fewer users? We need to be sensible and stop talking about ideological solutions and ideas and talk about things that people actually can do. If we give a long guide on DIY for normal people, they will just say this looks too complex I will buy all my Bitcoin with an ETF and forget about it. Ideological solutions are good for nerd talk, but should be reserved for that otherwise we keep creating a worse and worse system where many people are relying on custodians who otherwise didn't need to do that.

I love Bitcoin so much, but often, I do not understand Bitcoiners.

Go DIY and you'll wonder why you didn't make that upgrade sooner.

It seems you don't understand normal humans..

[Meuserna]

All of this just reinforces my belief that DIY is the way to go for those who are able to do it.

Which is appropriate for what, like 1% or fewer users? We need to be sensible and stop talking about ideological solutions and ideas and talk about things that people actually can do. If we give a long guide on DIY for normal people, they will just say this looks too complex I will buy all my Bitcoin with an ETF and forget about it. Ideological solutions are good for nerd talk, but should be reserved for that otherwise we keep creating a worse and worse system where many people are relying on custodians who otherwise didn't need to do that.

We're not talking about dummies on Facebook or Xwitter. This is a Bitcoin forum specifically for hardware wallets.

I love Bitcoin so much, but often, I do not understand Bitcoiners.

Go DIY and you'll wonder why you didn't make that upgrade sooner.

It seems you don't understand normal humans..

Again, this is a forum for Bitcoin hardware wallets. I'd expect to find people here who understand how to secure Bitcoin and who prioritize minimizing risks.

There's no way, in a forum like this, that I can be the only one who thought through the ways trusting companies is dangerous.

I stopped letting hardware wallets generate seed phrases for me back in 2022 or 2023 (I don't remember which) because I couldn't prove the seed the device generated was truly random. Then, ColdCard users started getting robbed due to seeds that weren't truly random.

That danger was predictable, and solvable. But people want to trust companies.

People are getting robbed because of Ledger supply chain attacks. That danger was predictable, and solvable. But people want to trust companies.

Mailing lists get leaked, giving thieves names, phone numbers, email addresses and home addresses. That danger was predictable, and solvable. But people want to trust companies.

I don't expect the Facebook crowd to understand this stuff... but here? In a forum where longtime hodlers discuss Bitcoin security?!?

I'm not seeing anybody learning lessons.

P.S. Ledger's key extraction API will get hacked. That danger is absolutely predictable, and solvable. But people want to trust companies.

It's all going to get worse. The question is, is it going to get you? The danger is predictable, and solvable. But you want to trust companies, so you're bound to get caught in their errors and laziness.

These dangers are easily avoidable. Maybe not for Joe Shmoe on Facebook or Xwitter. But here? Easy.

[Pmalek]

...but for some reason, most people want to trust a company even though that goes against the entire ethos of Bitcoin.

When there is an easy way to do something and a difficult way (even if safer), most people will pick the easier one. That's just the way it is. Buying the individual components for a gaming PC and building it yourself at home is cheaper than buying a ready-to-use gaming PC in a popular shop. Despite that, most people will buy units they can just plug in and turn on, even if they are more expensive. It's the same thing with hardware wallets. A minority will be interested in building their own. A minority will use dice, coins, and other ways to generate seeds. A minority will want to deal with stateless signers and moving transaction data back and forth between online and offline devices. That's just human nature.

[joniboini]

These dangers are easily avoidable. Maybe not for Joe Shmoe on Facebook or Xwitter. But here? Easy.

I think you overestimate people who use this forum a bit. Yes this community can be considered niche and some people probably have more knowledge compared to some random Twitter user, but it doesn't mean they're that dedicated to security. To this day I still found people using exchange address to receive their sig payment, for example. Just a few days ago someone asked whether ditching hardwre wallet and sticking to exchange is the right move.

I do agree that it's probably easier to encourage people on this forum to move toward self-airgapped setup though. Especially those who visit and read board like this one regularly.