Damus
FLASH profile picture
FLASH
@flash
⚡️👀 ICYMI - The theoretical risk with marketplaces has existed for years: someone can buy a device, modify it or preconfigure it, and then attempt to put it back into circulation via a product return.

Back in 2018, Ledger had already issued an official warning about devices being resold after being preconfigured by a third party with a seed phrase already known to the scammer.

The victim thought they were using a “new” wallet, sent their crypto there… and then the attacker could drain it remotely since they already had the 24 words.
2❤️4💯1
baldteeth · 1d
Woah. Interesting. How would we combat this?
Telluride · 1d
The answer Used be to buy direct but anymore it’s looking like supply chain attacks are a real threat. Ledger and coinkite are both big names in the space. Build your own seedsigner is looking to be the only way to be sure. Its really not that hard. Google it. —It’s like four parts. ...