Crypto security

Does airgap make Bitcoin hardware wallets more secure?

We've researched airgap to understand the actual security benefits.

Anti-klepto explained: how the BitBox02 protects you against leaking private keys

The BitBox02 is the first hardware wallet that offers protection against the nonce covert channel attack, by supporting a protocol called anti-klepto.

Security

Remote multisig theft attack on the Coldcard hardware wallet

tl;dr: When registering a multisig wallet in a Coldcard, the Coldcard did not verify that it is actually part of the multisig wallet. This allowed a malicious computer wallet

Security

Coldcard isolation bypass

Responsible disclosure of a Coldcard vulnerability that allows an attacker to spend your bitcoins when you think you are signing a testnet transaction.

Security

How nearly all personal hardware wallet multisig setups are insecure

If you use hardware wallets in a Bitcoin multisig setup, using a single computer to handle them, you are likely to be exposed to remote theft or ransom attacks.

Security

A ransom attack on Trezor's and KeepKey's passphrase handling

Responsible disclosure of a remote ransom attack on Trezor hardware wallets where users are vulnerable when entering the passphrase on the computer.

Hardware

Best of both worlds: using a secure chip with open source firmware

Learn how our unique security architecture does not compromise on transparency or security.

Release

BitBox app & firmware update 6.2020

Update with an important security patch, as well as many new features. We recommend that you update beforeyou next use your BitBox02.

Security

The pitfalls of multisig when using hardware wallets

Bitcoin multisignature wallets are not the silver bullet for security that many claim they are. Not yet.

Security

How we do security assessments

We disclose how we rate security vulnerabilites to foster an open discussion towards a more coordinated industry approach.

Security

Theft attack on Trezor Model T

Responsible disclosure of a vulnerability affecting Trezor Model T multisig wallets that allow theft of all funds of an account.