Damus
Juraj๐Ÿด๐Ÿ’›๐ŸŒ˜ · 1w
Three questions to ask about any hardware wallet Most comparisons argue about chips. Three duller questions tell you more: Does an outside firm test it, and can you read the report? Anyone can claim...
The Stacker Monster profile picture
I think we should apply these same standards to wallet coordination/management software. Sparrow Wallet (by the brilliant @craigraw ) has been widely recommended as the gold standard including by @ODELL and @MartyBent

My understanding is that it is essentially one person (Craig) who is developing/testing/reviewing/merging code. Of course, it is open source so people 'can' review it, but coldcard firmware was also source viewable/reviewable.

Maybe folks like @ODELL and @MartyBent can help fund (via @OpenSats ?) a formal review of software like Sparrow Wallet and introduce a paid bug bounty program.

Otherwise, I imagine more formally tested software like @Liana Wallet may be more and more appealing to people vs. Sparrow Wallet given what we all just experienced.
2โค๏ธ1
Juraj๐Ÿด๐Ÿ’›๐ŸŒ˜ · 1w
I think community funded bug bounties are a good idea. Maybe even pooled. Should we implement it? Basically everyone could fund bug bounty program and say: "I use Sparrow, Liana, Trezor, Jade" and the funds would apply to those (first discovered, first paid basis). And then people could pledge (b...
Juraj๐Ÿด๐Ÿ’›๐ŸŒ˜ · 4d
I think Bitcoin Red Team checked it, so basic AI model check is done. One thing to point out though is there's a huge difference between Sparrow and Coldcard. Sparrow is an open source project (true open source - free to modify), a public good that people should audit and there's no pressure on nos...