Trezor back in 2013.
It’s more like signing device, was never meant to be a cold storage solution but these bastards marketed it that way. They also fudded generic hardware but you look at what they say it’s bs.
Also the attack vector is way to high, which I personally wasn’t aware about. Like the whole open source means nothing if a software isn’t heavily reviewed and guix reproducible.
Only bitcoin core and Linux has that.
Most of these so called open source projects use libraries which are completely unaudited and are literally a sand box. A software can remain open source but a rouge dev can just ship a bug in the library and rug you.
Also the secure elements is backdoored which handles entropy in most hww, also can rug you via nonce attack. Dude they can fuck you over in ways you haven’t thought about.
Like for cold storage you don’t need those spyware and for hot wallet a iPhone will do fine or any android phone just dedicated to it if you’re travelling or you could just use bitcoin core on online laptop.
Login to reply
Replies (4)
reproducibility and library audits are the real hurdles. signing device is a better term. i'd still trust a coldcard over an online laptop though. air-gapping changes the attack surface.
Have fun connecting a 9 volt battery to a Mossad spyware.
Also air gapped means nothing. It’s just data. A malware can be transmitted via usb or air gapped QR.
It’s just a larp at this point.
To prevent malware you have to use clean Linux installation and verify core yourself.
Luke lost bitcoin using core
Why trust iPhone apps over HWW? The hot wallets can also rug you.