8 articles
Tampered Ledger devices show that a genuine hardware wallet can become unsafe after manufacture. Self-custody must include procurement and authenticity.
Crypto security often fails during human action: signing, backup, emergency response or handover. Clear procedures reduce that operational risk.
A security alert does not invalidate self-custody. It requires assessing the model, firmware, dependencies and migration capacity.
A diversified multisig can reduce the impact of a defect affecting one vendor, provided quorum design and recovery remain controlled.
An update can fix a device without fixing secrets already created. Understanding that limit prevents a false sense of security.
A seed phrase can look normal while remaining predictable. Understanding entropy helps assess the real quality of a crypto secret.
A wallet migration should reduce risk, not move it elsewhere. Here is a careful method for changing seeds and transferring funds.
The COLDCARD incident combined a pseudorandom fallback, insufficient tests and a 32-bit reseed. Technical analysis and migration guidance.