RC MINT Gem Notes QR code private key potential physical security issue

[2stout]

I am not one to spread FUD, but wanted to bring a concern to the community.  If you've dealt with me and/or met me in person, you know I'm about the community, the integrity of our hobby, and having a good time; besides, not saying anything wouldn't sit good on my conscious. 

With this said, I've been a long term raritycheck support since the beginning- they can even vouch for this.  However, as far as their Gem Notes I received today, there is a serious, compromising problem on my 2 notes.

My hologram wasn't securely attached and the private key QR was able to be exposed (pics below).  The area of hologram that attaches to the note is too small to adhere properly when taking into account the thickness of the private key QR code and doesn't leave a honeycomb or proof of peel if lifted because the surface area is too small.  Even when laying back down, the private key QR code can be exposed without leaving a honeycomb or proof of peel.  Both of my notes have the same issue.  You may want to check and see if your notes have the same issue.







 

[raritycheck]

Hi 2stout

Thank you for letting us know. We will replace such notes if anyone has this issue with

1. We will issue a refund or
2. We will replace with a new note with a diff public address and same serial number

Lead time for replacement should be about 4 weeks.
Please message us if you have this issue.

[anonyart]

This is seriously concerning, especially considering this appears to be the second major security issue involving RarityCheck Mint.

If I remember correctly, there were already concerns about private key exposure in some of their earliest releases (please correct me if I'm wrong).

And now this? What is being presented as a security hologram appears to function more like an ordinary adhesive sticker than a proper tamper-evident security seal.

A hologram protecting a funded private key should NEVER be removable or lifted without leaving clear, irreversible evidence of tampering. That's the whole point of having one.

We are talking about physical Bitcoin collectibles, where the security of the private key is fundamental to both the value of the piece and the trust of the collector.

At this point, I think RarityCheck owes the community a serious explanation. These aren't minor cosmetic defects. They are potential security vulnerabilities that undermine confidence in the product.

[Rymaster]

Good catch 2stout! As you mentioned, looks like this problem could easily be solved with simply a larger hologram sticker that has more surface area to adhere properly to the note, so there would be honeycomb evidence in the event of it being tampered with. Not a big deal for notes Raritycheck still holds, would only have to replace the ones that have been sent out thus far.

The small hologram does look cool and gives the note a sleek design, but if it can't perform its root task, its existence is futile.

[minerjones]

Too bad there isn't a company/person who makes quality notes without production issues....   

[raritycheck]

Yes we are checking with the vendor. Btw we are wondering it’s the heat while on the way during the postage combined with the surface which caused this because we did do sample test.

We initially started with 6x6 and settled on 7x7 mm. We will also have been working with them for a while..
also, checking a second vendor to see if can be better strength glue.

2stout for you was it off or you had to apply pressure and it came off.

[2stout]

Yes we are checking with the vendor. Btw we are wondering it’s the heat while on the way during the postage which caused this because we did do sample test.

We initially started with 6x6 and settled on 7x7 mm. We will also have been working with them for a while..
also, checking a second vendor to see if can be better strength glue.

2stout for you was it off or you had to apply pressure and it came off.

The holograms weren't all the way on/somewhat detached when I got them, which left the QR code private keys exposed.  I pulled the holograms back a little and noticed no honeycomb or proof of peel.  Even when laying the unattached portions of the holograms back down, the QR code private keys were able to be re-exposed without leaving a honeycomb or proof of peel.