Damus
whit profile picture
whit
@whit
Hey plebs: Who is red-teaming your wallet?

๐Ÿ‘€๐Ÿ”

Not auditing it once.
Not reviewing the open-source code.
Not waiting for a bug bounty.

Who is continuously paid to try to break it before an attacker does?

Ledger has Donjon.

Who does your wallet have?

Ask them. Bring receipts. ๐Ÿงพ

Cause friends: I asked over 100 questions of each wallet and the big commonality shocked me.

#Bitcoin #BitcoinSecurity #HardwareWallet #RedTeam #SelfCustody #Nostr #HardwareWallets #Coldcard #Coinkite #Ledger #LedgerDonjon #Trezor #BitBox #Passport #FoundationDevices #Blockstream #Jade #Tangem #Bitkey #SeedSigner #Keystone #RedTeam #RedTeaming #InfoSec #OpSec #CyberSecurity #OpenSource #BugBounty #SelfCustody #BitcoinSecurityResearch #ResponsibleDisclosure #AI #AISecurity #Nostr
1
shadowbip · 1d
donjon is solid, but it didn't stop the recover firmware. i'll take coldcard's airgap and reproducible builds over internal teams reviewing closed source. receipts don't fix the trust model.